{ "Event": { "published": true, "date": "2024-06-28", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-06-28", "timestamp": 1719619392, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "5ec23a9b-6902-4c2c-9207-8db216dfdd2b", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1719597426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597426, "uuid": "686a000f-b945-4317-9783-8d4c336e99de", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597426, "uuid": "76cd8dfb-2dff-4787-b5e4-da872e8fef87", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597426, "uuid": "0d260dcc-4295-4702-b792-7bbc9b27623f", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597426, "uuid": "b1c7fdb8-1b54-4df3-bd1d-20f55e6528ab", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719597426, "uuid": "3516a717-43b0-4d79-abbd-e59b5259cc1c", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f814924-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1719585946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585946, "uuid": "c19d954e-9ded-4b7f-a095-f3c2716900f8", "comment": "Malware payload (CoinMiner)", "value": "aba2d86ed17f587eb6d57e6c75f64f05", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585946, "uuid": "125f2586-8397-4b04-82c9-f52be84b8d63", "comment": "Malware payload (CoinMiner)", "value": "807126cbae47c03c99590d081b82d5761e0b9c57a92736fc8516cf41bc564a7d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585946, "uuid": "db1ba3e8-a467-48c8-912e-33c42aaac1d9", "value": "F5752296FF4350B4D8670278216AF3BE113EA40089374EF6E7C15BCBECA7882255935B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585946, "uuid": "8159c25e-81b4-4f1a-9763-7f87f3fd4722", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585946, "uuid": "555b72ca-ad2b-4161-9895-14a739be0911", "value": "24576:pWKqa4hnzP3w7L3rmZmpk7FSQFW2iJ+N07/TwYV1CdZdQ+4lT+iFgiGTtswAtdz:pSrwf3aZmpOFU2iQNIUc1LxGTtswgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585946, "uuid": "50f7a1fd-4f88-49ca-bbad-54817cb75aee", "value": 1578496, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "221cf8aa-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719563830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563830, "uuid": "839d474a-ca73-4fd3-8036-7a344f12e831", "comment": "Malware payload", "value": "ad266387a0005cca9e355f842c1eed6f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563830, "uuid": "dcbf7af4-ce32-4833-a77c-c0a69a53164e", "comment": "Malware payload", "value": "dd81f8b28ffba84f418b7ba15c3406b9e69e722281ab5822e8191aea1ae6e728", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563830, "uuid": "0b0c9cbe-a7df-4c49-a3e8-ae0471d79fa0", "value": "84831229135924A6E62244F1D3FD1F84AE591F69CEE2EC047C11BC99DE333AD2CD6618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563830, "uuid": "26f2b25c-39e1-447a-a84e-4dfcc06ead19", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V4:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563830, "uuid": "c1a561aa-9694-49c4-b7a6-f617823edb3d", "value": 81088, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "162ca49d-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719592678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592678, "uuid": "744664a3-21f7-44a6-91ba-6f2ba3c73139", "comment": "Malware payload", "value": "619dd480f958fe306b4aea8d176becb7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592678, "uuid": "0ea8b094-64d6-4a96-923b-aed4290ce695", "comment": "Malware payload", "value": "6cb60dd1c0b08385bface8d0902003cc043f627e09aeb05ef6d23c7fc22077f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592678, "uuid": "bc97f4c8-4099-4455-976d-680e640bc9d6", "value": "5BF2024633843773F16245F4E3FDAFCA601A7D649FEE242BA441356270B321D649D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592678, "uuid": "b5350735-4a33-4953-afc2-9e67a1cb5928", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8q:yYI0ARqw1qAEW67UIWi7M8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719592678, "uuid": "0b9eb117-1932-4543-8982-667d86d77527", "value": 34560, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719570872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570872, "uuid": "7c44d375-8b06-4393-b96b-8254f981fda1", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570872, "uuid": "166c89a9-dcd4-442f-b0ec-2a530216417e", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570872, "uuid": "e5175e65-b4fc-4848-becf-0d7ca6fbcf78", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570872, "uuid": "ec37b0ae-7bef-46cf-98d7-df6a45196a8b", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719570872, "uuid": "91086f90-d773-4b26-b47a-d35a3d7179dc", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16f41eaa-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719598723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598723, "uuid": "27a1574d-0525-44c5-adf3-2b422ef6f050", "comment": "Malware payload", "value": "b7c1fb454c8c20aa7fe7aeb6180d412f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598723, "uuid": "91da9fc0-eff1-4dc7-9f60-c15f1568b7bd", "comment": "Malware payload", "value": "810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719598723, "uuid": "1e3de9fe-b001-44f3-8ede-daf908ab7f31", "value": "B9B2E18622993703A4635AF4F27D7F8A72067D68AFBE943B45503123707321E6758C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719598723, "uuid": "1d18dfc8-3ce2-400a-a023-29de57b4621b", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9LrEQSXh:YTYIDfYG6ZmewZ59+Nw1qsREHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719598723, "uuid": "53677843-c624-4abb-a3ab-9b9b3d8e9ef6", "value": 24616, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc85c4c1-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1719585944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585944, "uuid": "97d6698e-3096-462f-a3b8-85992d15ab6d", "comment": "Malware payload (CoinMiner)", "value": "9f3069e77d062da63b7ba5c1f35e9937", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585944, "uuid": "1da1a5dd-84b5-43f9-9317-18dc7fb1d8a3", "comment": "Malware payload (CoinMiner)", "value": "ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585944, "uuid": "1f93f750-a64a-4b74-b7b9-cb694cb11ca1", "value": "BD563345F4809837F139153625F884B2B07DBC7297244BDBA39E2AA56E317D83339A4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585944, "uuid": "7a359e16-82cc-4273-8bcd-36eb644730b4", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585944, "uuid": "19ff950e-2ec8-43a0-8146-2657f5b5a870", "value": "98304:RLJSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:LBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585944, "uuid": "de69d6e5-d375-41de-bf7d-ee6170b7fdde", "value": 6227160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1719533046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533046, "uuid": "7b04247a-f77b-49d9-af4d-913342979f47", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533046, "uuid": "79d1ad88-accb-4f5a-a50b-589c7c1d7801", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533046, "uuid": "8090aceb-2b3d-4199-8724-8b91f7f2b240", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533046, "uuid": "c951c469-e2d3-4942-bd06-8685b310d9a3", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719533046, "uuid": "d0de2a6d-8a25-4cb6-a9e9-d2068e4eb127", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719553746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553746, "uuid": "edb7aad8-50cf-490a-a2e6-b337bdb8d70f", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553746, "uuid": "b060e8a1-4ed2-4499-add8-bee010fbdd6a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553746, "uuid": "06bf359c-7dbb-4230-aac0-fe5d59c954d0", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553746, "uuid": "77d7eee7-d463-48b8-addd-adc7a78b9e92", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719553746, "uuid": "84584181-1505-48d7-b2f5-b0da6511d481", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719534847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534847, "uuid": "03ae9a29-1d88-4151-a186-929265efe0a4", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534847, "uuid": "7b4ea455-506c-401a-b321-92c28040e7ab", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534847, "uuid": "aab36758-f515-4aa5-856a-32582257ff54", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534847, "uuid": "b6843732-3d74-4a1f-8bf7-17bf5cd8590b", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719534847, "uuid": "55477c21-2209-47ac-9b98-9234534e6411", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719544386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544386, "uuid": "0cd40e06-1606-4df5-b676-49e3add77e94", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544386, "uuid": "65ea5549-dec4-4ce4-8150-534708cfbff6", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719544386, "uuid": "48e365bf-25ca-49e1-b5d6-c00da6d22450", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719544386, "uuid": "f1e0caa4-93e7-42fa-8468-a29f40b368ae", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719544386, "uuid": "b426a7c6-c10b-48b5-b4f2-eccdaec31c0b", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1719532988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532988, "uuid": "f80e075a-4879-42a8-830c-87920cc20439", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532988, "uuid": "d9003045-22b6-46a6-b3dd-2d47774d9918", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719532988, "uuid": "1704d5df-df0e-4733-ac88-56e8e4439364", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719532988, "uuid": "6d66909e-a792-4777-b031-10b494454dce", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719532988, "uuid": "e1bf5e62-2de4-4704-9e89-ef45130f0884", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c8f376e-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1719589162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589162, "uuid": "b6aa0d14-3958-464a-9bab-986ac70d3a05", "comment": "Malware payload", "value": "de30f31d2e667f1742fb1b3fe51609d3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589162, "uuid": "e1f3939b-4f04-45d8-94d8-58aaa03e4c89", "comment": "Malware payload", "value": "870cd878e7922d3c71d37c89f94d774770b24d106782d2893b3a11ad180d8b7b", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719589162, "uuid": "9e194a1e-4494-49a3-875a-c7a4e1fa7c57", "value": "E36402AF99777C8BEE1B0FF021A70E4E5AFDD2CAD2C668906255048435FD346A2507CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719589162, "uuid": "8cf6e0a7-58a3-436c-8876-604db3bd72c1", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6co:7O/QJHZweEL/NOjCHm7FZZnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719589162, "uuid": "6c20ca87-dead-4d12-9134-044868aece2f", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1719540126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540126, "uuid": "7b12541a-ac4f-4b85-9407-cfea8a104a91", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540126, "uuid": "f1dc5bb3-cac2-4e15-b96d-b2d96f6914fa", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540126, "uuid": "620323ef-ff5e-421a-a886-05b480768455", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540126, "uuid": "d14f09b9-6ac5-4fdd-9507-6598be5d60a1", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719540126, "uuid": "20b28bbd-a70c-49b3-9bb9-a58fc3877947", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540126, "uuid": "edb8a52f-bf0c-430a-8c27-35369e5edc16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b0283-604c-11ed-a083-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1719571516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "3e8fb8bd-3f70-4d0f-bc30-6dea3eceae4c", "comment": "Malware payload", "value": "1f44d4d3087c2b202cf9c90ee9d04b0f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "ac65d1c6-8998-46e5-bd08-629d937d0ee5", "comment": "Malware payload", "value": "4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "2306be72-94e4-428d-aca8-b3a2596baef8", "value": "T1FF356D4AEA07AC7BDC5302754617E39B0575DA70A833CB8BEAC81D68DEB3DE116097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "c8a5bbb7-309a-424c-94cc-122fb756fa75", "value": "e727d00364cd87d72f56e7ba919d1d40", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "2b1ad88f-3fe4-49ec-8f60-827c613e18cb", "value": "12288:dxylSMUMifofI9ayCvcZMBiMjCodEMdo8R66tCWko5+jsbFcoYuprzpGSgGSrz:d4AMB3caSZMijBI1CWkoj5auF5gGSrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571516, "uuid": "b0b665b7-0495-4b00-be41-2b91b512875b", "value": 1106998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "e7aa9524-54ba-45e5-a5e7-969caaf930a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1147a846-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "306b6a57-1030-43a5-a666-8b054efb7259", "comment": "Malware payload", "value": "550686c0ee48c386dfcb40199bd076ac", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "670ec34c-b54e-4aca-9c84-8e39e014346e", "comment": "Malware payload", "value": "edd043f2005dbd5902fc421eabb9472a7266950c5cbaca34e2d590b17d12f5fa", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "eb314222-3a52-4896-96c2-6cd622668ecb", "value": "T1CAE47D26E352B427E48314B5D60D67B74C301F35476198EBEBC17E68AB716D2A238F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "826a07da-4df9-4817-b6ce-e9242480b194", "value": "f781fa19ee3108d3fcdb3967b70bbdf5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "6a9eafa2-7e9e-4d7d-9627-f6672ca64577", "value": "12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571516, "uuid": "36d18421-d05f-4dbd-b6b6-36162a702374", "value": 685392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "31286f24-dd41-47a9-a8d2-216b5d42320f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11862e3b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571515, "uuid": "8dc7f7ae-613a-4dd4-bac4-7e853c91e870", "comment": "Malware payload", "value": "4e52d739c324db8225bd9ab2695f262f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571515, "uuid": "c4627bc2-6737-431c-8c59-96ce21e39a3d", "comment": "Malware payload", "value": "74ebbac956e519e16923abdc5ab8912098a4f64e38ddcb2eae23969f306afe5a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571515, "uuid": "c23f567c-8161-4c15-b288-7bde388dd04b", "value": "T102445942B581A474E49238B5315DB73A2C3A5621B3E5C8C7EF81AEB01E642D36F3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571515, "uuid": "88d298fb-7e52-4e91-a48d-0caceb5b7f1e", "value": "32ef7516974ac0c43943c0635266c6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571515, "uuid": "aa511f42-71f5-4184-862d-62ae112345e3", "value": "6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571515, "uuid": "a7a7c6ba-4625-44af-af60-e0de3f1db43b", "value": 257872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571515, "uuid": "4971c9d2-46dc-420e-8eeb-4d36903fb19c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11d5c618-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "acfa4b85-7cbe-4c50-a9ba-b26c9fdbe2d5", "comment": "Malware payload", "value": "c8fd9be83bc728cc04beffafc2907fe9", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "9cd5e493-1d79-4585-bdb3-e62ed4fd582c", "comment": "Malware payload", "value": "ba06a6ee0b15f5be5c4e67782eec8b521e36c107a329093ec400fe0404eb196a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "966f1524-deef-4004-b395-9cbb2668a586", "value": "T140D4AE03E9D450F6E95239B2302FEB3E953427368B3488C7C7E46D955B356D2A2BB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "537588e6-d2aa-47d6-9a73-d9e4e86174e8", "value": "c190cce47c6cbf1ec0a59ffd2965da30", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "5b9c9841-f2e2-4cc5-a2b3-014571bd0620", "value": "12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571516, "uuid": "5a74f5a8-0531-41db-9710-15f04bd24e80", "value": 608080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "88a0ea3e-4f67-4c31-8c41-c3d8cc0bf6b4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "122c756b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571517, "uuid": "e02a7f74-7ecd-4b47-bb90-b8ab2a7a711a", "comment": "Malware payload", "value": "1cc453cdf74f31e4d913ff9c10acdde2", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571517, "uuid": "8c537387-852b-4645-8919-02253c0097bf", "comment": "Malware payload", "value": "ac5c92fe6c51cfa742e475215b83b3e11a4379820043263bf50d4068686c6fa5", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571517, "uuid": "7a245b4b-cb89-47a0-aa31-caf5b299dd51", "value": "T1ED959D52A9C9A0B1E84931B3B89EE7BE1E3053235B26C9C7D7940DD85F556E3133E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571517, "uuid": "cfeeb047-0162-4676-a1f6-0aacbbf58ed6", "value": "91b2deacd206ef373baa926022d03ae2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571517, "uuid": "2f3f1e98-b7e5-4331-85db-240df64e9347", "value": "49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571517, "uuid": "00b62073-b431-4c23-bec8-5f6182e2a601", "value": 2046288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571517, "uuid": "c04c740a-7004-4236-b4b5-4cd2edc75db7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b4e1e5c-10c8-11ee-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1719559815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559815, "uuid": "5a970472-b89f-40db-95c5-3e156340ef95", "comment": "Malware payload", "value": "12c26ab43202d2ef17553eeb17376c2a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559815, "uuid": "e97afb6b-f48c-42fb-b274-88a666f9d7f7", "comment": "Malware payload", "value": "cb56bffb224d9bcff0753d58995c25f6f944bcb075560019cd87283e3b443aa3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559815, "uuid": "fe798970-f31f-47e1-92d4-c60b2fdedd28", "value": "T1D3D40109A99590B6D0713BF07A48D0605527BE482E208505B1FC7E9F3B7E583EE4A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559815, "uuid": "49a102f2-dc0a-4284-8cce-562205b51ca3", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559815, "uuid": "175288fe-7e55-422a-b5fe-d6e0dfc42aea", "value": "12288:RQi9zSYMvrOK9BOKjHol+yFnWVOjTPlxsU807BN/9+FJeyuAJMX7QYQ:RQiE7eORaEOjRxsUrLUoJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719559815, "uuid": "10c77885-2add-4496-ad66-9c0632f88f4f", "value": 653833, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559815, "uuid": "bf40f07a-2cf4-4562-89d1-21583bfc683b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12a9c32c-b3a4-11ee-9ea4-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560853, "uuid": "99db5e58-ffe5-456f-8817-ca9ecfe15332", "comment": "Malware payload", "value": "9ee720d869b727108f6ae49e951771fe", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560853, "uuid": "777aad05-586e-4343-9ece-bf0f3d76f56a", "comment": "Malware payload", "value": "1fd428ad999d2d12e7763d082ad50e10fd4a294a9b7c97547889528c638d65fd", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560853, "uuid": "d8fcf447-107e-427a-8018-66f5c82db758", "value": "T1B9563317C29FD3C2BBCE2922565647EDB334EAF3A8917113DF4AA889114BC59FE017", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560853, "uuid": "2472c549-34b0-4969-bde7-04cc9fb80118", "value": "98304:4fAyahgCGOvEC8uc0KjdoMPbQZ53+NB0HczGROTtntg1Eb6l:4fAya2lOECvWoDZcN6EtnHb6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560853, "uuid": "f0d4848c-31da-4702-8a5f-3a10850d2c0b", "value": 6064064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560853, "uuid": "2189f730-44b8-461a-8fc0-638223bd6192", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cab1fdc-c47c-11ee-b9d1-82aee05be84a", "comment": "Malware payload", "timestamp": 1719605292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605292, "uuid": "1909bf2f-26e0-4276-ad0a-7c359407a8e1", "comment": "Malware payload", "value": "a21768190f3b9feae33aaef660cb7a83", "object_relation": "md5", "Tag": [ { "name": "AnyDesk", "colour": "#655a3f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PlayaNext", "colour": "#eb052a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605292, "uuid": "51545423-3bc7-4768-843e-e7621cb89fe1", "comment": "Malware payload", "value": "55e4ce3fe726043070ecd7de5a74b2459ea8bed19ef2a36ce7884b2ab0863047", "object_relation": "sha256", "Tag": [ { "name": "AnyDesk", "colour": "#655a3f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PlayaNext", "colour": "#eb052a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605292, "uuid": "bd27ada6-1f9e-4837-8976-8d6cda8fa5de", "value": "T1B23633B622D75CBDF9618B733CD29230A8A98F42E517131ACCD4C56ECBBB7496460C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605292, "uuid": "8544abcc-d9b1-4a25-9d94-3e04eacea7a9", "value": "98304:NzTZ3cINQscs0m++LNkT6OpwDGUUH57yvZ/49Mr8EO3QhA9Kq:Nzt3cINQscNmvLCwDkHEvZ/4R79x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605292, "uuid": "b298eb2d-e57a-4878-8846-f44a565044be", "value": 5216584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605292, "uuid": "90c42bc7-5e24-463f-be81-72c79101814c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2885321a-e2ef-11ee-b38b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "82b494ce-01d1-4ca7-b3de-b396abe897d2", "comment": "Malware payload (Mirai)", "value": "a17133e7cdbe2846ca7ec6afc3dff426", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "e1cbf6ef-873e-40a2-93c1-f0fd0d4bfe09", "comment": "Malware payload (Mirai)", "value": "f803e06cce936cca205979fc43ab1190f8d5b4efd9d786254c41fe1eab074e04", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "02d21163-a0f8-4801-aaf7-552666082081", "value": "T13C430960114172BCF4F9003DF41F12BA61B3072EBFEEE7DBA4A2A179E5609442976E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "6f747591-4032-4e82-b71b-259a6853e88d", "value": "1536:/DPFzn1LAnPhfh9ukp9ZlvF8ZBpgk8GyLn/:/D97wPRhA8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "a2024ea4-40ec-4b9f-acb5-3398e7861b7b", "value": 59932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "3548b133-f0ba-4659-a28c-b090455d6d58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "40f3e546-1d49-4f55-a88a-043e08a191e5", "value": "t17ce0d800bc694e2848d69a749dad4668a61092536412c720cf15dbe1c83f554a31de", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13691625-e747-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1719557441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557441, "uuid": "372f9afe-5c17-4c64-b570-4e1b166489c1", "comment": "Malware payload", "value": "fcf7d47a0154b7c6669168f422498179", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557441, "uuid": "ba63aea7-010a-4699-84d3-fdcfdf4f4cf0", "comment": "Malware payload", "value": "83f93ad87fd3c9b7cdba97a273c630f81c402620c877959447c0f2a51c3dfe12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557441, "uuid": "2d5b0098-cebe-49f5-a35e-30d8f8191aaf", "value": "T10D854B16E60784F6DC27097116C3F77F0B20A226D8709DAAD7985C9CFA338D5762C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557441, "uuid": "194908fe-8317-4ac0-8231-d9ae55ea231d", "value": "49152:hPbWaJHqtxsO6k3oyrJNHC0/07JCuHArssu9zu9mCeBhFxhTe:hj/JHuf6soqo7JCKAQsu9zu9mCeBvx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557441, "uuid": "f9a69d5a-1df4-48bb-bb53-7be89fa5f3c9", "value": 1853656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557441, "uuid": "417f21cc-e4ea-434d-a5f3-33c08aa23d09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557441, "uuid": "6c149019-672e-4793-bf31-ba116a02ed96", "value": "t1ff827d49ee9825bcdff795d47e73982786a618e8a3822f89831cdf6221371575f4c8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a69d41b0-e780-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1719586044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586044, "uuid": "77d3ee34-5b21-4c65-8f2a-8ccfb5ff374d", "comment": "Malware payload (CoinMiner)", "value": "ca1fb1ad30189110cc225620dc537368", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586044, "uuid": "912821fb-f199-455a-bf9c-873aa599c10b", "comment": "Malware payload (CoinMiner)", "value": "3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586044, "uuid": "a9364607-67fc-4615-a558-d1bcc4e2a307", "value": "T1C4563395F0806422F13D183615BA84F2B07CFCB343654A9F539E2A756D383D9263AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586044, "uuid": "f08598ab-b88f-4516-9bd4-655a0c802a26", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586044, "uuid": "fdbbf9ea-d661-4de7-8558-867544a8250b", "value": "98304:RLNSThOfTCiFBXmfFs+JhTpCVoR8oMEOJ6Ty3RvX+A0eVObApY:bBfTCiUsBVSLOJgyBG3KTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586044, "uuid": "a3324866-f205-4079-bae9-73e80988e796", "value": 6227230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586044, "uuid": "7630571a-08eb-416f-a53c-0c940f942eb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25748153-fb5e-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "cccff239-9443-4f09-8e73-184910d6c45a", "comment": "Malware payload", "value": "b45de93a62d253504bee1cae27e40c83", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "c631fefd-1054-41fd-ba57-7fd5d277280d", "comment": "Malware payload", "value": "0efed6e0b6a26b49a2fb8ab8e3a0bbac2a78bf114040b1afe1ae2892babf1e24", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "e138cd35-6466-4222-b3e9-7aa45433ecfb", "value": "T1C6D012E541000AF49280FA49B3CBCA3ED4014BDE2DCA07D4584C43B35044941FCE1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "95ea1374-2336-45d7-b3d2-f491d1b258a3", "value": "3:Q5FI5ef+gqRuOEq5OSH2olKN8KZW55FIQK+gqRuOKOSH2xVUUVjE:K9f+ZEq5x2eKNbMBy+ZKx2xqMjE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "34fc88c6-09e2-48dd-87e1-acdea599772d", "value": 196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "50bb7d65-3539-470a-a20f-4b6ce318dc1f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "258019de-fb5e-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "bb650490-6888-4c0f-92c2-682e2736f5d3", "comment": "Malware payload", "value": "447f8cc21a9603ec6593b3311faae0dc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "d03b98a1-16d6-4d55-a752-2235f27ef077", "comment": "Malware payload", "value": "5bc1c14e1d1efc4ba04d7569e4287741d9c680eadc9f8ac064e8da91b2650e0d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "75408628-6343-474a-9cbc-69eb0586fda6", "value": "T137E04FE901150DF4AD84BE4B619A8922F507939F18C24B50689C23F2849CC14B882E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "53fe1e32-b13b-4968-b06c-c4bf6708aa13", "value": "6:lswzI9EWJ+/x2eKN5FzswzIdWJM0FOx2xqM8:GLSW2x7KnFYLdWJOxUC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "2dd4c1ab-1151-41e5-8db6-06eb938edee2", "value": 323, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a3bdc325-4c0a-4da3-9adc-8167228b0f04", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fb1e47a-06ee-11ef-ab08-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1719572414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572414, "uuid": "64e9ed77-88a6-4f4b-b1e1-510c512464dd", "comment": "Malware payload (AgentTesla)", "value": "b7b7cf00b14133419aa1db47c60b36a3", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572414, "uuid": "84adabc1-4406-453c-84bf-4f03473abc4a", "comment": "Malware payload (AgentTesla)", "value": "c0b478fcfe2a9c5ac9405060e5d6c31d62088d19b4a4f608f7c744c9bb6a048c", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572414, "uuid": "5228ed05-a98d-4682-b607-05d856894cb9", "value": "T1F96485F9A037ED8A87370980E1043F179C299EDF667887FC778815D1C29C68C99E65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572414, "uuid": "744cb4a8-f646-4370-a6c7-727e9fe690c7", "value": "3072:968AJ4KF0woyQ2HZwo0QQxhj9BqdnJthaA7fPZ06jMLeQuQGTp9KaU6DmnKPYsPP:lC41gwochBBwJtFLPUSQcKaUPqXXwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572414, "uuid": "fc6a3a21-e1d7-4221-a61e-273efc765171", "value": 328364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572414, "uuid": "22b24ff5-dd8b-42f2-a1ab-fd533d2ef3ed", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb3b47a-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583030, "uuid": "9943aa55-fee1-4130-9c2b-13b9799e4073", "comment": "Malware payload", "value": "fe9ffbf4e3d88a6e640d26f137ec5d27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583030, "uuid": "09a09ef3-4faa-4f2d-8d9f-3a9241dd1fa8", "comment": "Malware payload", "value": "ea1c3a2691aba5b747e3461898d7aa0da3d58547910e585766fbdac3b969d45b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "76912547-c4f6-449d-b7aa-9dc2410d615c", "value": "T12DD63B97B5924A43C4E4367AB8BD81C433A30EF99B8656666D04FD383FBE1D90E397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "0ff822fd-7883-4430-b313-cae2c1207ab4", "value": "49152:foOA6yps2Vx4qoCtLE+51d/FgljGhVAsrqi7nmp97sVAqxRAV3jmspsLjE/ZjuoE:wOAlpxx4cRhxup7sWteE/VH0uF/Ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583030, "uuid": "911f7629-6c71-4378-bf44-aad5001f0205", "value": 13041664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "ea3ca5c1-46a8-495f-a51b-618a2da9eaa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "78cb43db-8616-4388-b369-dadd184f3303", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86297af3-0d06-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1719604987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604987, "uuid": "7b18b3f8-1af8-454e-9449-2372e1e9e2b4", "comment": "Malware payload", "value": "75eecc3a8b215c465f541643e9c4f484", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604987, "uuid": "d42094c1-3504-478b-ae1d-ffa0f90ece63", "comment": "Malware payload", "value": "ec33d8ee9c3881b8fcea18f9f862d5926d994553aec1b65081d925afd3e8b028", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604987, "uuid": "29b53077-0bae-49bb-8dc9-1e2406ed3e1f", "value": "T11D46330D77F01AE1CEB786B99E43A623B5A79FF10D6211024DD5270C9277AC83FA7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604987, "uuid": "d5ddfbdc-7e87-4748-b131-6614ea794fde", "value": "98304:j5ObAu2pmits24nYhQCWQdaQQo/mJPv4KYZPKBhYI5RuN4OL2wIjcsJWNg3:IAnRu24nR5QcTvYdmPuWOL2TcQWe3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719604987, "uuid": "aa7874b2-1abe-4e83-b072-bebdcb07b79b", "value": 5525576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604987, "uuid": "354b5434-dd8f-4ea6-95db-c2562d0b0ea7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd970c4-0ef2-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1719585949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585949, "uuid": "9d785907-8b79-4820-ac1e-905b61116754", "comment": "Malware payload (CoinMiner)", "value": "8caa858a427dda38bced89183ad90530", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585949, "uuid": "5b575e88-6a82-4327-90be-b67b9d1483c3", "comment": "Malware payload (CoinMiner)", "value": "717fac4c5f7f77428de80b2da5edf4af459f6076ecffb288bcbdcede21f81961", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "f8f42bda-b5eb-4a5c-a397-dc23ce57e650", "value": "T1E0563355F0405822F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "75fef7fe-64d0-4681-ad54-4b9718d7c476", "value": "98304:EUJC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+Li3jxqQjz4F4VRc:JWfTFU3muRH6OJAMp+e3jYqW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585949, "uuid": "f63bb044-439a-46ac-bc19-13b42c21007d", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "505b849f-6b9e-4b76-9858-f5dfc44662c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1719582848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582848, "uuid": "5b9b501e-b7ba-41f0-bf0b-0264cd00329b", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582848, "uuid": "3c1194c7-ebd6-4af9-97bd-fea168ffbf62", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582848, "uuid": "8579abc5-c769-4d74-b7fa-14ac9bdfa5ba", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582848, "uuid": "d42d6d20-cdce-4020-b6ad-1f2a8584f7c6", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582848, "uuid": "2581ef76-16b5-47b0-bcc4-488013fc7077", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719582848, "uuid": "b912c888-8047-4442-a211-87ed72be9f7d", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582848, "uuid": "97d42fce-1ea0-4183-b318-895e025f5831", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebbe57bd-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1719586026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586026, "uuid": "836eb485-61ea-429f-98c2-1c655d03205c", "comment": "Malware payload (CoinMiner)", "value": "a9d4007c9419a6e8d55805b8f8f52de0", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586026, "uuid": "3ea2ea1c-25da-43cd-bb2f-5df21ee927ac", "comment": "Malware payload (CoinMiner)", "value": "5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586026, "uuid": "e993633c-f00b-4f1c-a2f2-db034f147cb7", "value": "T13F563355F0405826F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586026, "uuid": "5e6e34c0-7022-467a-b73e-48037bf8193e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586026, "uuid": "657194e6-09db-487b-9e33-c03c6919d05d", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+jb5jC3ajz4F4VRc:HBfTCiUswVSLOJgyBGv5jGQW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586026, "uuid": "2616b71c-307f-4de5-b6e0-ba76d80d2209", "value": 6271268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586026, "uuid": "9c0cbf53-d3ee-4f1b-9475-05982c197e4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b06ab149-108e-11ef-ab08-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719557352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557352, "uuid": "e9feb0d1-a448-45a3-94cd-5b896327198a", "comment": "Malware payload (PureLogStealer)", "value": "b149f82964b1e269ade2686612a9e777", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557352, "uuid": "3940a457-5757-49a5-bd4c-2417ee55f8cf", "comment": "Malware payload (PureLogStealer)", "value": "9f2c70239fe518552ee44423564b075a85e0fc1e7bd80dc233bcc1f882ffceb9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557352, "uuid": "c9a77d76-1920-48cd-bac1-dbaa80428086", "value": "T157E6338367C40A86DCF6337695F64B978920BC0B17B9D86F1381D5F22E42614E8A7F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557352, "uuid": "76a14680-b67c-4c6c-899c-0117bd75ad32", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557352, "uuid": "14301efb-379d-4153-91aa-43cd05bd42ef", "value": "393216:FwI5aqRbG66MMgLaDArf6tY5yParKZwVgIZlds:FwSHLyMytYYP8KZwKI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557352, "uuid": "a643749d-7bec-414d-a5b6-b4c7cd951a5e", "value": 14834688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557352, "uuid": "7a2d4694-f2ef-4c13-94d2-d90d31579f35", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fd205ab-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "72d95e5a-fccc-48f7-807f-cc541261a778", "comment": "Malware payload (PureLogStealer)", "value": "794a7bc49c07d085d9e3cd15515f961d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan.acll", "colour": "#a57033", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "a7c449a1-d06f-45d3-ae25-d9a4a11e5eb6", "comment": "Malware payload (PureLogStealer)", "value": "3ba0f4f8645247e4f440e38ca2b0f91bed5d239452e97054e75e25d371ec4d98", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan.acll", "colour": "#a57033", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "7c58e25d-cd1a-4c48-978b-cdd0c068d70b", "value": "T16C94233E93E95A29F00F877266130B96E0109616721646233E9D3D60FEF91BBA7471", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "7b24ba9e-410a-4f15-9652-0c74fcd1f28d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "96fdae8c-dbf9-410d-aa7d-cb25115aba50", "value": "6144:2/VRn8YJDOU6q7Fb3Y/Fuss5RMExwzXvgHRsE14miEHB9TTavJKvKCz3Pw51VLqj:UDRDOO3mixwz4HRWEHLTTFCCz34DVsz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590352, "uuid": "9106b16f-88b2-42aa-acbb-78ffd6e25e14", "value": 445440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "bda4250f-077c-4cd6-a8b7-b1d8696688ff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a48b2265-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590355, "uuid": "c519c728-7faa-4acc-a36d-f7da1711b28d", "comment": "Malware payload (PureLogStealer)", "value": "461e951ba79964b681e9a8bc9d61a92c", "object_relation": "md5", "Tag": [ { "name": "celestybinder", "colour": "#a12368", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590355, "uuid": "473026e8-a217-4798-81b2-5062e2e638b5", "comment": "Malware payload (PureLogStealer)", "value": "de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f", "object_relation": "sha256", "Tag": [ { "name": "celestybinder", "colour": "#a12368", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590355, "uuid": "a618cfcb-305b-4644-9ad7-39f74e0059d1", "value": "T1E046BE10FA49CC76E81244BD816D3D4E9364ECF83B5914CF63847E5E2ABABE538335", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590355, "uuid": "92544354-4880-4a4e-a209-9613e10354c2", "value": "7f379848125893f6a5658e249931398d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590355, "uuid": "1d619539-d779-4b70-858e-f276b1afd3e1", "value": "98304:28DaacSl8Gb4CieDNDQfCmzgHCS5nidPDjJ4zfm4xrXEkuJTQS383:28eacSl8Gb4CieDNDcCoynQPDyZxcTr3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590355, "uuid": "4b64368f-c477-4a11-b28c-a73a88c276fe", "value": 5737472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590355, "uuid": "ce4e8339-92b0-4450-9cab-344d85d71b83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4db023d-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1719590348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "117e1a0c-eae5-4b21-9b41-cd13fe1358bb", "comment": "Malware payload (VenomRAT)", "value": "26125c571d6225959832f37f9ac4629a", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "purlogstealer", "colour": "#9a4323", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "2e34f9bd-8823-4316-86d1-7f559cc08266", "comment": "Malware payload (VenomRAT)", "value": "94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "purlogstealer", "colour": "#9a4323", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "1830761c-5366-4af8-a413-ad0480d95207", "value": "T167734A003BD88D26F2AE47B9BCF162070EF4D55B2416CE9E3CC454DE5B66BC589036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "f8c61a49-44e2-42d3-b3c6-60090ede2ca9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "5e0b50b7-eea1-4d01-a21e-6f53fd7bd497", "value": "1536:CSUEkcxNYungvHZDJ/SkXizIqksbLvPMw6/eqmmRhdWVH1bfbv3SrwzUQbVclN:CSUxcxNYungPZDJ/SkXizIqks/vPMwZq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590348, "uuid": "82298937-9eb2-4ff3-a73d-997f2a0642b3", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "7a67b518-9480-46cb-b11c-baf030dd6730", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8303af7-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "5599124b-cb5a-45e8-a625-b7e0939dc4ac", "comment": "Malware payload", "value": "7aad5e78aa5e3c4c1fd5da339379185e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "adf3da43-71df-4c1f-b35d-8ae6a48c2ea6", "comment": "Malware payload", "value": "190d6e71962c2fb06d954fc87c750734da772cd9abf9281789a55d7f202868f6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "b7d8b342-71d2-44f7-9357-7c399ae44166", "value": "T17F11D0657CFF5129D961A160BC1D6E05A14352DE104C82BB37D8201E2A5A34DB2FCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "cd0b6060-c4cd-48fe-af60-991011cd300c", "value": "24:vB9+G1aUu+1U1XDE5/XD7M95aMuUHu8A38piVIaHIaDJVI7Iz+D83/u8D:3haUfU1gdM9l/OApiXpJSb83WC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590347, "uuid": "81eec6ea-a898-4261-aec1-3daeb924b8e0", "value": 1084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "1ba84608-cd59-4d76-8396-654abdff1813", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e843d64d-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "d2e7ef0e-79bd-4a3a-9035-ae61889ec469", "comment": "Malware payload", "value": "d7611fe03255e5bd4875b2840641a27a", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "e3814ab9-ce2e-439c-9139-6679f460b962", "comment": "Malware payload", "value": "5b90c6d36dd9147c16504351c20d7e5de5842b9dac2f8e57a9e4b525521f01b6", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "4e1f8bc1-e4ca-478a-b1b7-b368b52ed8e5", "value": "T175213D164C0B42263A76C4708A102208F15BF383B91888E3F23638914E6B64ACFEED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "92675a7b-5284-4d2f-85d5-1b644424cdf7", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpDfYw1RpDa1vGgq8L:JpOI8nhAHlqSYwg0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590348, "uuid": "3e4288fe-fccc-4e0a-964d-6f3b9e6583cf", "value": 1200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "6b3b465c-d238-4469-b217-588c6be438d6", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d093383-18dc-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583087, "uuid": "abdc60ed-0e14-446f-98c3-d9aa06fa1f7c", "comment": "Malware payload", "value": "696a6a067718322e6b3ea7383634e8ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583087, "uuid": "af147546-7905-44a8-abba-dc50964bed74", "comment": "Malware payload", "value": "32ecc151a2705996c7b537a48bc9b762ae281712f6f4a55a835f086406e7d3dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583087, "uuid": "9d3429eb-54f1-45d8-837d-4cec6133b896", "value": "T1196633E840662F8F561BA5F82FCB95863FB700C05DEFBF9546994A3701C5E13B9788", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583087, "uuid": "e038b73f-4215-4a04-ad78-36275f5f5e0c", "value": "196608:rFvdTt47T5sGTWu0Xk9m0olyESDPvAMbX+CKtUWZL7xYNMFa:rFvUX5rTWsuyEyA2utUWU6Fa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583087, "uuid": "0752b775-45a0-49bd-89d3-fe8b5c7b757a", "value": 7067481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583087, "uuid": "1b96d058-03d3-4ff2-9622-a82c67b11754", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26407b49-1ce8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "81a4ab28-047f-4d98-9c3c-3850f1ba7a96", "comment": "Malware payload", "value": "34961215950869251baa1879d161a90d", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "d5d3ee10-f809-4f81-afae-b8690207ceb3", "comment": "Malware payload", "value": "360507179fd7378dc3d0a2743ef1ddeb14d77295d1ac09fe5a208120718e4868", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "d6858f91-9e1f-4b5e-a315-e2337f673208", "value": "T12701902F5150210A4D39C4741A290B84B04FE6C5C1504EC77A3D6C715C1F41D87EDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "eb0efa5a-5071-4a2a-95a7-69ea00ded1dc", "value": "12:/8866bYIg2t88MeMQ7huU99Jwztps8JmpDvawpis8Jmp1Gyu1i76+s8wYj85KwHi:/k8Yrmme/9uC/wpIpDvawpNp1Jee6dYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590353, "uuid": "4c4cacec-5b24-4e8d-8320-8e1545811583", "value": 750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "28f786cf-66a3-41cd-8435-246c40c70e24", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "265d1b48-1ce8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "664c5a85-998d-49b1-9cbb-50f224026b97", "comment": "Malware payload", "value": "0442d6dba4e1fa21723042e6e5d8f254", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "1dfa5732-f592-42c9-833d-e11df9b51836", "comment": "Malware payload", "value": "930616041832b0f5b7392a31ae5ff19b205ddec219c9b111b2f9f15ea69bd4a8", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "7d4e9f7b-9e3f-40d5-82cc-d9aaa42402f9", "value": "T10BF0787B9216292E5F39C8183A390F49744FE5C5D01466D77A281D972D8B06C83EDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "35c31824-3265-441b-b634-3777f768308b", "value": "12:E3H88OzM6bYIg2Xh88MeMQ7huUgnUs8JmpDdytmfs8Jmp1RKyt2yeUe8eKTbAl9D:E3HOM8YrMhme/9uTbpDEPp1DfNGK8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590354, "uuid": "dcd6b3c1-dd85-4b58-94ce-aeedbfe72924", "value": 606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "b407c36b-51c0-4f67-9bf7-429622c57924", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be2e6f7d-2572-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "2c4bdd39-792c-4bb6-b09c-13ce0a50cc1d", "comment": "Malware payload", "value": "389302fa508fc226a39862ab2cf4ba4d", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "9f06034e-5527-465a-97c0-e79bfcffaa6c", "comment": "Malware payload", "value": "d116b0085b4771bab18e70b3145634919264dd0f21a81ab3a1be2b9ff03c8573", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "5353dbf3-f448-4bf5-991a-f298eb722c02", "value": "T1225312D7D236E6F7E44E88718AA9A2D4F3C192C32121D7E931CD31BDDE2AD94C6939", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "d6404f9b-7d11-41d2-98ab-4016a4ee2587", "value": "1536:4DsNtWb4b0lT8R89mQPuPZdgi8IIPyOxI+Ud:a+g4bQsGIPZB84r5d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "0c3df735-3871-4423-a469-636a9511a53d", "value": 63760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "d311784f-db07-4e3c-8f23-a551e18fb0de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "dc054ef1-f934-4465-bfc4-dc1fe177166f", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca6b90cd-2658-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719557351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557351, "uuid": "dc18b284-67f9-45a1-b476-7f9c2c1e8139", "comment": "Malware payload", "value": "53099afa75043ea832b64db81231caff", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557351, "uuid": "f8b43de5-641a-45c8-9428-980495294593", "comment": "Malware payload", "value": "1e7223bc42e7aa07035b6deb1c3cedd2cba26b522227548061b5723bf744ae3c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557351, "uuid": "338855d6-daf7-4498-9f48-e224333827fe", "value": "T1C8A5E80A6B3E4A59D41188BEC23B1173D959BC1CD028BAB48FC44B457F91F6096BE7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557351, "uuid": "d47808c6-cd91-45cf-a43c-80ef3c84ac42", "value": "962c85077451500f48e28c629171faa0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557351, "uuid": "cb129b8e-6975-4573-9b9f-2eb32fc0d8ed", "value": "24576:7wXn4671GiW2nM/2hXNzpwxIiN23hRKYrDobbd0sCGHjc3Z8FdgPFGA0:7wXn37hNVwxIR3GHg3ZbPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557351, "uuid": "a105c566-63e9-41c7-8e24-26e4be789cb2", "value": 2147840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557351, "uuid": "495b4688-a8ad-4d29-9c33-de9f5943d1b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8924de5-2729-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1719557410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557410, "uuid": "462e5af4-a040-4f67-880c-487be55c9a21", "comment": "Malware payload (Metasploit)", "value": "a62abdeb777a8c23ca724e7a2af2dbaa", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557410, "uuid": "02e31a4a-b61a-4a92-8ca3-875581096cc2", "comment": "Malware payload (Metasploit)", "value": "84bde93f884b8308546980eb551da6d2b8bc8d4b8f163469a39ccfd2f9374049", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557410, "uuid": "cab1f9fe-be7d-4d33-bfe5-803048ae3bed", "value": "T132E1A1233B0048BAC86C173542E3FC77728A99683B7B93B74A1802073B9222412B1E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557410, "uuid": "90c99ea7-1cab-4d7d-808f-bf6e02bb1a58", "value": "b4c6fff030479aa3b12625be67bf4914", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557410, "uuid": "efd757fc-688e-4f75-b082-05871419741a", "value": "24:eFGStrJ9u0/6qZBnZdEBQAV8aKq9K9qR0eNDJSqUmZEWdXCIGDpmB:is0bXEBQpE9cSDoqUjWZCSB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557410, "uuid": "bee9bb74-320a-41ff-9648-2387b2f954ad", "value": 7168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557410, "uuid": "8ef1efc9-6d62-4c93-bccc-121c12755707", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce4a3c40-277b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "b30269a0-2236-4109-9176-1f3f980c4420", "comment": "Malware payload", "value": "0ab77b0aab5eed4546d5b6b49ac2592a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "1155cb0f-b7b2-4549-9119-905e5dff24ef", "comment": "Malware payload", "value": "abe70af2e3a5115cd3dca195d9e8c2c9b6a441cb3f13bebed952e99377dd5106", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "453ec145-c18f-4252-962d-13278cbb1a18", "value": "T1A38302DA60941823EAF8293673F4C6277A63D3EC605817FFA258B4BF48151D13A85A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "ddabdc3d-4217-416e-af9c-85d142ebbf7a", "value": "1536:ZSlaCZw3K0iGNaO3mAJ3NGxOR3vXwp+6rUS1zY2nFu2:ZgRZ08w11NGKfUGSnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "ccbf52c6-09a8-4318-aece-6f89b2be8bf4", "value": 81664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "5028d4a4-f25c-4a80-a311-1228ad730b09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "b1374cba-a77c-4cf6-9bfe-943f07a28786", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40e6f94e-2785-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "6d81691d-4ed4-47a0-ae5b-4eb085456c79", "comment": "Malware payload", "value": "0eafe0d9549d0a9c1fca956138fa137e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "5ddee579-1452-4a27-82bd-98a8bf5587b1", "comment": "Malware payload", "value": "dd326d6f910d0883d1f81edd75d827c76a8fd744c36a59783103afc9e8174d24", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "80cb0be2-1753-4659-918b-943cdcd90a26", "value": "T14E63022C461360A3D46E5172441A1B44FDE6EE5CD9079E0E3A88A8EFCF365957CE3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "8bfb34cd-0dd7-4ee5-aab7-15c7d20b9cbc", "value": "1536:xcAoAGkxOciCRSKwSl5tWCsxRXXbdknLE1xfQugraKXahcZ1uegVEWy:W/kxOciCRJjtW9f7ysGaG1fgVEx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "9d668edd-d28c-4cfa-8927-458b87dcb239", "value": 67336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "b93908fc-a6d8-4fcb-8cf6-1c3f3fe5a652", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb24ac34-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1719557418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557418, "uuid": "31d8c6e0-d0ec-4329-b9f0-a49bd6e8b520", "comment": "Malware payload (Gh0stRAT)", "value": "ce7dc5df5568a79affa540aa86b24773", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557418, "uuid": "bed55523-f2c3-444e-aca2-3d3a6c613504", "comment": "Malware payload (Gh0stRAT)", "value": "0af21e5bdeaf84c33c172a1170987cca478c2b3e13a3de5653f724f36e278ee4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "a8b58847-2e00-48d8-9946-933ff06da2fc", "value": "T1871502CADD68227AE1B714B09817A5DCEAB50CE11A3CD97B03F607C579722B8A5361", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "61f7425d-cb8e-4b72-a672-81215dc1122f", "value": "33967a24a261bf787771766b0c0f449a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "dc9c3229-fe10-4c1e-bddc-cae353e3f34a", "value": "12288:7BxGT8EnlLPCyyOe+9kN62Ijrd1L81nVPxM+xS7Tb+rdgg3bTpyN7JGp8wgKCp/y:7Bx0lLPLyOQNf2ryn8+MfG/0F+8lKRlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557418, "uuid": "bf575427-669b-41dc-bad4-f8019da4e288", "value": 909312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "bfe9291b-5533-4fa5-ac6b-63026438a8be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78cc21f2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "d5eec949-7ff6-4aa4-851c-90e95023f9a4", "comment": "Malware payload", "value": "30a833f838e2c597028d44d67c548699", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "46c5650c-9f8f-43e5-b51e-226bbbb513cc", "comment": "Malware payload", "value": "e42ff864f72fb03d35c920dd3392f8bc3c25f3383fe7a6ee38af649736adfc0b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "023c13bd-a814-4c22-8920-2bf1a182fab5", "value": "T1412120150C4B5227267AC8B0CE112444F15FF187A60868E3F26669915A5D20DCFFFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "1962b91f-2df0-41dd-af85-44b2af186af5", "value": "24:wBpzHOeI8H+prQyRMaekVHV0e/9uDN1XCuw1HXR1nJs3zOZAIq58SUjGv:GpnI8eTeMl+HrwlBMjOK5Zn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590347, "uuid": "28263638-a47a-48e0-8e22-be595908f2e7", "value": 1376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "d4dae3fc-3fb4-4785-ae1e-ca230aa2c255", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79074197-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "87ffb401-3491-4546-a03c-bac958bd2182", "comment": "Malware payload", "value": "c348551fa8fea00106049dd9ff8c07c0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "b5891281-c137-460f-a4f7-36c533394e2d", "comment": "Malware payload", "value": "daf42dd32dc71b3f6439b4cbee4284d6104ae894ab758e76f8ff12542ba038bb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "a9355356-d73c-4c70-a6c4-3246f6fd5f1a", "value": "T1CD51DE21BCAD5217D930B5706A1E6D41B287AECFA01C87B731E8111FA607B4DE4FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "839c0f83-eb96-4d92-ad1d-c86c0eb2df21", "value": "96:+P9ls0NWZFWBnFLwFYOnFOdWZLwODpiji+qxWf4NjmCOId:uzgAmDpKId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590353, "uuid": "0f35665d-80b8-4d8c-aca4-ecdbd4f3250a", "value": 3083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "b61e0746-20c9-41e7-9bb5-bc2403d0bf9a", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79da8519-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1719590354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "a570ee6d-abf8-45c0-9a62-844310c42e8b", "comment": "Malware payload (VenomRAT)", "value": "abd903204f59ff6cacecdfe31b70a1b9", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "01de8e45-cd2a-460b-924e-4e9f48188d65", "comment": "Malware payload (VenomRAT)", "value": "f513d263e64eddbd4e71dd6ca9652be04ebcacfa423e3d3b4046f1bd3fdc23d8", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "511ad066-b031-4769-be5e-d16443aec603", "value": "T14E734A003BD88D26F2AE47B9BCF251070EF4D55B6516CE8E7CC410DE5B66BC58A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "bc65cfad-55dc-4818-9a0d-8b97c77aa7f3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "7d07a659-0b8d-4b49-b485-3c49b6d1b19d", "value": "1536:KKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwlFRBgz7DAdAEH1bxbjXkwzUYbVclN:KKUmcx9FbKHo6dLR33s3qbQSM0NEPMws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590354, "uuid": "0ea3c8f8-74d5-45d3-8c01-70485265481c", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "209f488f-5ad6-4b9b-b76b-0e34cabfe97a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8027e5-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1719590351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "a5c59c50-cfce-4f61-b2be-a1d8f01c1480", "comment": "Malware payload (Formbook)", "value": "02e07416de23472dfcc5a97ea6c94fab", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "e0edc3a0-dbe8-4d09-a528-b2d9df2c0412", "comment": "Malware payload (Formbook)", "value": "2921703b5b2148ca96cc58270ac0adeaa7842687c1c05b09cf439940d1ce43e9", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "c5efbb1d-ee5e-4206-8cc2-691d0af507a0", "value": "T1CBF3EA3C29EB2C55DF3B9BB29FE8B4A5CAA5E211451BB27B084312D74F03A418D174", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "99f32e56-e50a-4ed6-8e32-ab98c50bfd74", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "3e5d43f4-cf22-407f-ada8-04556dc175fd", "value": "3072:P2oSgerNIGKoThbHnr5nZUgiVSO+fJ6+W0k:PVSNNIGK2bH3UgiVSO+fJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590351, "uuid": "78632346-3a07-43c7-9122-053f0c3bec77", "value": 164352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "084e58ad-196f-44ed-99ca-3cd767fc59b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bd7bb51-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1719590352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "418a421b-376e-41eb-bf59-bf0aaf5efb53", "comment": "Malware payload (PhemedroneStealer)", "value": "9260f5e80678b6490676270838c08941", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "9fe04bcc-933f-4e16-bfbc-4c87f8c0180d", "comment": "Malware payload (PhemedroneStealer)", "value": "81e99ca58577796d708d682e7a3807f507d9f650307a15033835116c28b149f7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "edf92a10-7a56-47df-aad2-d4a96d244bfb", "value": "T1B6E3281877FC4E45E2FF8F7C7CB452914BB2F8269929EB4E0C5851EC0AA1B848851B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "403b47ad-5e8e-4938-85f8-630abf00aa01", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "1d5f25a4-ba9b-4bf9-b1a0-9a33be9cdab1", "value": "3072:nywhuhNC38S7gzQ/cGD4UdYs2sbyYtLt/w/HOWJbG5vcX+1kwEKEAm31D1:+zQ/FnbyIw/uWJbGF1REKQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590352, "uuid": "1d0a1f2d-a498-4560-8cbf-4cd06aa1d4cc", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "a226e93a-c176-476d-892d-9ca06b2d3328", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7be5546a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1719590352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "40b4317c-8c1a-437b-83b5-d9c0e8c9a4bf", "comment": "Malware payload (PhemedroneStealer)", "value": "1137bbb4cba39878cec6719df21630df", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "cf855bf6-0ff4-44ef-adaf-ac5a9053b95c", "comment": "Malware payload (PhemedroneStealer)", "value": "de9738bd66cf075e2de53f21c2bcc5b79709c68e7899e9ce3c045ff485e8d499", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "42778688-ff68-449e-977f-b22df53981b7", "value": "T125E3281877FC4E45E2FF8F7C7CB412944BB2F8269929EB4E0C5851EC0AA1B848811B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "dd7b92e8-f5a8-446d-8e1e-6ab26b4d52b8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "fae128c9-7e48-4e77-bc31-7d281902855c", "value": "3072:EvsbYzhuhNC38S7gzQ/cGD4UFA72iGgWLt/w/HOWJbG5vcX+7kwEKEAm31Dt:ysbxzQ/mrGZw/uWJbGF7REKQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590352, "uuid": "b3f5e7d6-5f87-4308-a70b-f53f6c19eef2", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "a13549e9-46b7-463e-9ee5-15324f36e91c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c5b0eb8-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1719590351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "3325942e-4135-4b0f-b647-b3c1450a8d39", "comment": "Malware payload (VenomRAT)", "value": "96fd436f2e19e2b73942d2020df62970", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "0dbc1c48-0580-4aca-a4bc-4aea73647eaf", "comment": "Malware payload (VenomRAT)", "value": "4a165517f5415fc61d91c06d2d0d9d00b2c77a6a8419617eabe91c967f180fb5", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "90e09c36-b2b1-4aa3-be01-f5e71d1949e2", "value": "T11E735B003BD48926F2AD47BDBCF162070EF4D55B2016CE9E3CC454DE5B66BC59A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "a6965468-08e8-4d60-80cd-138a45067145", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "d66bfe03-97d4-477f-85c4-83ef9955a6f5", "value": "1536:aKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwS/eqmmRhdWVH1bfbJIpT4wzUobVclN:aKUmcx9FbKHo6dLR33s3qbQSM0NEPMwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590351, "uuid": "f2a66217-eeb1-4019-b2e7-797182cc81d1", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "a27f6b77-ad11-4280-8673-9645a2aef00d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d1b51b2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1719590349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "0075683c-139d-4ef7-bbea-f3db34733148", "comment": "Malware payload (VenomRAT)", "value": "0073055ad7552b19ea9a239023318374", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "422a38fa-b6a0-42b6-8116-6c8626652b61", "comment": "Malware payload (VenomRAT)", "value": "24624fbc08819d03d65e7620531753c2d1ae208d8c7293fb096799effa2f59db", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "d2c1952d-2851-4f7d-a1d7-6b2372434699", "value": "T17E7349003BD8CD26F2AD47B9BCF251070EF4D55B6516CE9E3CC410DE5A66BC68A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "e8579c95-38e7-483c-b8de-d1ee97f7702c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "e5b3fa58-cab9-4305-a5f0-b876f26b1b9c", "value": "1536:KKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwgFsBOwCOpdABH1bXbmP8UXEwzUYbVS:KKUmcx9FbKHo6dLR33s3qbQSM0NEPMw8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590349, "uuid": "70ebf50c-eace-4997-aa6b-41cb01684a19", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "3a11f648-90a8-4641-873e-0f20f82fb4fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d32614a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "23b8e572-a427-4413-a813-ffa6aff297c2", "comment": "Malware payload (PureLogStealer)", "value": "d31d65a28dca61cf4a21ba5020b60e83", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "85fea830-89c3-46be-b96c-6452fd85dcab", "comment": "Malware payload (PureLogStealer)", "value": "92a7fe2b03068c2f6fedca98128924bf37e1b379b181569000cf94401a188577", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "0ebac408-ba18-4b84-9285-df8e93f8b3f9", "value": "T1650533EB652B92DBFF4D483739F14E0A54405C3A3BB5ED9FA602CA12DA255284133E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "62e5c4c6-88fd-4ac7-918e-c2a7136d1727", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "21f975ad-3240-4284-8859-92499113fbee", "value": "12288:Ebbie6BPrmHLC1d8YnYbQwJ+Uj+WDOY6pC2IykSBsdw1v3lzm0Xs/+W6O9TeRK6Z:AMPrmHLCLs9+urGBsCfP8GWHRe99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590354, "uuid": "84283b6f-3c4d-4814-b1a0-f3847ef2b347", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "694305fb-9b88-4f4b-a3d4-4d523c5ecd80", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d314d56-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "8a602f21-0726-4ad8-9c29-4af164395f48", "comment": "Malware payload (PureLogStealer)", "value": "7b099cafaf5dada250f611dfef156cdb", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "ff3522f2-5399-4584-a19e-9dc5fb664cfe", "comment": "Malware payload (PureLogStealer)", "value": "0830d3544414f99b0602152e3c873050892021e3f64f5fd4664cdef8902712e6", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "9c5fe354-2fd4-4e62-8366-6bf5ee7eae30", "value": "T19A0533684BF16BB2F50A64710AEB4E06FAD49EBC9C9E7676FB18BFE1650243110E50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "6eef643c-5454-48e7-a817-00357add4c43", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "6ddba39e-b679-4ce5-9e22-afddb597dcdb", "value": "12288:vnMnNBsD/RVWVCW0U++kYNe4yf/zrMusJNA8jIEIGtqH0gGoiPBs7KRJO4hq8SJ:EB+qoJUe4izGXApx1FiZhTYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590353, "uuid": "caa621e0-4ecb-47d1-b631-c880f321422f", "value": 856576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "89243466-3677-46e6-8300-a1843b9632b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d2f368a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "bb105329-5c6e-45cd-b6aa-c1e03e69521c", "comment": "Malware payload (PureLogStealer)", "value": "60b4266cdb4dc9b44d595677680a94f2", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "864e69d9-69d6-4225-b819-ddbe3d560da6", "comment": "Malware payload (PureLogStealer)", "value": "797d26b3674ee0fcacd3cb945437fad630bee75f847603dd47b86e775850803b", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "47f9a82c-797d-4688-b20b-18798265b6eb", "value": "T1FF0533417626116DCC8C5B71DC2854C338762758BD02FDBB8A3E52932EEC6CE6E9D1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "58857502-435b-45d8-b673-4dd3d6d2a060", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "282045ac-6432-4e62-9779-0aa5b5fb1c75", "value": "24576:f4RIxJ+BqW7ijtBveSCYhlA7aAe+kd09K3cBjq/kif6KJ:f4CupECYhlCN0d098", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590353, "uuid": "107a1792-9d66-4b84-84af-67ec7c5ff328", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "33162d78-2cd7-4f51-9b85-ad681b29d64f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5a7cbf-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1719590354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "d55df243-a9e4-4626-b330-5d5ceaf7e1a1", "comment": "Malware payload (AsyncRAT)", "value": "c4e10100c5cf7bec2d9d0a1d7203ddb2", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "690fe3e4-9c4c-45a3-a582-27b8e6bc21b5", "comment": "Malware payload (AsyncRAT)", "value": "fdc933b64df0832a1f88f0e19a4cab67fb110d54c4913367a7215d7890f8a5b7", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "e4da3dc5-1613-4223-9911-55d762e5be37", "value": "T1839429002BFC862AF6BF27B9F4B155004FFAF48BE866DB5D0D84548C1863B44A9517", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "04ee4d1c-c148-47c1-ba04-400a3e583607", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "154d0080-c96a-454e-bc40-fb2cb2446688", "value": "6144:0NYzj2jBoO33tq6qbXaYBc1g5aN9KBBBBBBByygHG/bZbYdNpmIU:eYzAq81g5aN+BoKD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590354, "uuid": "de8ac098-3657-4d36-8ffe-d9ec7a1978bf", "value": 414720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "fa21a83c-1369-49a7-9797-7188dca16bc6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5cae6f-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1719590349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "ef237c07-8d42-44d5-a242-808c9c353394", "comment": "Malware payload (AsyncRAT)", "value": "66c8477bcda21e458259146b7563b75c", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "cd2f65a7-3fb9-4794-8029-5b78b441f3db", "comment": "Malware payload (AsyncRAT)", "value": "019b49d6208392f0ce7d1d166e9e666580a9bb12967f58be5ce5d03afd31ff9d", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "f7713d8d-4734-4557-82b9-f0b564566e3a", "value": "T1F5735B003BD88926F2AD47BDACF261070EF4C54B6416CE9E3CC454DE5B67BC58A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "ccc58ec3-add5-4dca-9148-9716c7778236", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "31eb557a-6f51-4553-b93d-0f22ea200399", "value": "1536:aKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwS/eqmmRhdWVH1bfbxuowzUobVclN:aKUmcx9FbKHo6dLR33s3qbQSM0NEPMwX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590349, "uuid": "7ac6578b-1937-4742-b0b8-0fc37994fa53", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "fc7a7663-19fc-4b3f-80e8-df412e8a1f6f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d65aebd-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "528d80f0-0396-45ec-a4c6-c97be408a2a0", "comment": "Malware payload", "value": "fbd02c032e4f0547d5af380d177440c0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "80f480b0-a412-46e3-a927-9a5579f2edfc", "comment": "Malware payload", "value": "4e01e7bc7816c8b0f4efbdcfe98444373c6b5c272e5bb8379c867e65273cb2bf", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "59f16081-0fa7-4b62-827c-639eed30e97c", "value": "T1972130064C4B42263676C870CA112248F15AF283F81848E3F13639914E6B64ACFFED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "f40baa04-885e-45e7-928f-5d5cf5715ef4", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpGw1apXO16Ggq8L:JpOI8nhAHlqFwuOBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590349, "uuid": "3cd5c9ab-1af3-4678-a812-53ec76c715d1", "value": 1199, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "5ddf1bc1-087c-462b-8bdb-8a99bc7e22d5", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d6b22df-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "bc11a409-9fce-4bf1-8250-ef15502dc7a5", "comment": "Malware payload (PureLogStealer)", "value": "b33928657ad007fff7ace578faef7003", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "4d49dcd1-a462-4303-aba9-0fcd061b4109", "comment": "Malware payload (PureLogStealer)", "value": "8562112055dc2db00971733747931789d5ecad535ecd9db1511f80471969fc08", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "4d93d588-2059-4c4e-af6f-2d1093e2e164", "value": "T15B0533BCAC64CED9EEE2843D20B709941D7E67E185C2B753E090436095AF1D2B7F74", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "57dcc5bb-196d-40f9-a4a7-dec361585a3e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "fee62198-e6de-4c58-b830-76baf74c44f9", "value": "24576:SWBqAMgCJaopQOfc8KXDh8dTIF2c4oIo6a2Px9:1iQoN0oTI/4oFCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590354, "uuid": "d6f2e165-8e48-4308-bb26-8ca766989c6a", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "e04832f3-ebdf-4a3d-bc23-5f98d69e6786", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7da23d58-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "fda00e84-9684-404b-b1c2-ee3361bf2d56", "comment": "Malware payload (PureLogStealer)", "value": "f11f0ac05ff079702732b3e5d54fde1b", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "4e61e917-f7c1-45e8-9d70-f68fb16b9b22", "comment": "Malware payload (PureLogStealer)", "value": "116e2bece7a65c8d646ee813fe4b01fe0b5b0b6e9f85e2898306dacac30604a3", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "cc90a52c-27cb-46dc-ab3e-3c52ac098dcd", "value": "T14F05231581BA1097FFC010752CA6A3E6663CC66A8CE18314CBD371687E689B57F066", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "b1094df2-d10b-4fcf-9572-9a9eca5f6c22", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "f5969353-e342-47a9-83db-ab2dd31c42d9", "value": "24576:B0agsYyRWgvQOC1MRQnq9YgDQnt0ueQf9hW91C:BhgsNo9eQnq9YFreQfTM1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590353, "uuid": "4882cdf7-2de2-4a51-baf9-447cf4432c28", "value": 856064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "738820d0-5aab-4bbd-bb89-6ae3170a8ae1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7db71837-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "01a5aa88-25ed-4d09-bef8-756cb07e4f9a", "comment": "Malware payload", "value": "1220872b5a60851b40457bfa168f34f2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "1fabf1e6-a093-4a94-9863-16f3b29bb389", "comment": "Malware payload", "value": "b74d534d202ae38bd87147dfbb9a39cc1c8782cfcf0df25eba7948cfbeac2ad3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "f4a48b2d-ab8c-4f98-9cdd-c6f2d05c4908", "value": "T1FC51C4123DFC2269D521E660B96E6E40B2479ADE701C82B732EC151F6B1570DE1FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "a33cdd6e-d921-49db-8be4-ee8fd29faeaa", "value": "48:3hieAOUf1QvS1jdf9lVUUPbYEOH6xQWpiXpJSbJN6J4ZJjsJu883W7:FbgF9lGEbY4piji+qq2W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590347, "uuid": "08e520ac-f68c-409a-bec1-b68e6d5d8002", "value": 2472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590347, "uuid": "6fc04a88-68f1-4da0-9f9f-1b4e1f16d76a", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dd05bd9-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "354020ff-2a17-4aa2-83e4-67ce3f48f01c", "comment": "Malware payload (PureLogStealer)", "value": "3fa8ba44b848d959dec2f30e98adefa3", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "34f06f3b-9463-443a-a11f-c6f4036acfe5", "comment": "Malware payload (PureLogStealer)", "value": "520d5010f513a37e43b3ac3d5436f5baf21272e4c151b6dc34e87b23de72bc5e", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "b6057ec0-6884-4530-84b5-eb9759d0430e", "value": "T11F0533B0F9FA53B1CB484EB3A6D3A219619DBCBFE9B4D427C996193C4F423D103421", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "55127e62-3afd-47db-b41b-a010b9de9a11", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "615601c3-ef09-47ae-9371-0575946d7437", "value": "12288:HczqJS1vkI1mfzPhjh55rALUY7GObnjGqwESJs35iObF3uIcO7loMwJmy0bUT1yW:HczQlI1QbU7GGjI+cOZo8y0g+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590352, "uuid": "4398d64e-38c5-4da0-9e47-29f0fb69787f", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "89606fa7-15ef-4026-b79b-6f79c95d25cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1d2651-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "4dd110f8-8eb2-4867-895e-7bdac862c60e", "comment": "Malware payload", "value": "e6b58c73ae1b63baaa22df43e8cf925f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "dd2562d0-02a9-4eea-a749-ff9315f6bc9f", "comment": "Malware payload", "value": "92cabc554dec994aa671007571b3fc5022b329119a4f97cd108920ceb8ff14d7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "14456057-8545-4b59-b928-74e4ada48f51", "value": "T15E213D064C4B42263A7AC8708A112248F15AF283F91808E3F13639914E6B64ACFFED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "3b823535-3173-40ad-b208-80ce8cf2878e", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpTw1RpT16Ggq8L:JpOI8nhAHlq2wVBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590352, "uuid": "9d278954-426e-4ab8-a15f-b1b355cf14a3", "value": 1200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590352, "uuid": "0fa697d4-932c-4b7d-b61c-5f1ea90a719c", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1f3ee1-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1719590351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "ee216650-3c42-4d71-8a1f-44f30dade964", "comment": "Malware payload (PhemedroneStealer)", "value": "571878c5dbb5200509fddc36d7c01643", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "f6772cce-c293-45ec-b57d-b5f5d4bb5c0a", "comment": "Malware payload (PhemedroneStealer)", "value": "201453afc1cceb1da21a6a87a6921cb99d843ae93be6fd8c2c84d4e6cf025c97", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "95b2ed59-88de-4162-999a-b59dab704b9f", "value": "T181146B5877FC4941E6FF8F787CB452914FB6F8669925EB4E0C9850EC0AB2B848801B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "84a047c1-ced8-45d0-974a-101c76f65d32", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "2ca9b974-10e2-4a66-9eda-fd6949868599", "value": "6144:UsbxzQ/mrGZw/uWJbGF7REKQ1TLRSSXBHDUfp90k:fQ+yZw/CM1/RxXB4fp90k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590351, "uuid": "de78ef7d-d09c-4795-967f-75db2b256c3f", "value": 199272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590351, "uuid": "f60ff2ef-a631-43f3-a09c-5ec41c56ff63", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e5e43f2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "f724d9b1-09c7-4224-8d5c-b6f767b62b79", "comment": "Malware payload (PureLogStealer)", "value": "a41dcc178717a13af8972680faa8e697", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "37e214f2-9e24-4702-a1fa-4465b779e9af", "comment": "Malware payload (PureLogStealer)", "value": "7b8d1f3d477e0a2dfdf4ebe4908e85d4762b8c77cff787801f27580867dc16cd", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "8156cbd6-22eb-41c1-90e2-79de07dcb120", "value": "T18705234860DC619BF8E113F7299248FAB3113DF41AC6F78D2D1E932E12B17C7696C6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "7f688de2-d3b3-49e7-84ce-67459d57dd4e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "89b36b92-c602-4b31-8f56-a76520c890cf", "value": "24576:T+e/lcKH8igT+7O1Okjia6AOYP1i7RSzMdND5X:T+e/GcxgT+4ilAOHRD1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590354, "uuid": "ff257f1c-4438-4f6f-bd56-15ce58341645", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590354, "uuid": "39abb661-6fb2-438c-a3ef-422c746677e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e7702c7-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719590353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "16d7ef83-ae44-4778-b321-97c504d70a49", "comment": "Malware payload (PureLogStealer)", "value": "06b81c8edd7f620513a06e3a5cc11483", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "0de8aff0-1ed1-4370-be30-09d0a571724d", "comment": "Malware payload (PureLogStealer)", "value": "65082d1a97a4636a529d3a52248ec1eed728fa78c1a3b3e34986e0378b393f1c", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "305fc84b-5922-49f5-b063-4049042445a9", "value": "T18E05336341660B90EC3B31B91B5CBB85D3B4F45DB278AB7184FD3745D6C2D4C8A2A8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "ffd6af20-3361-4e20-be91-db5430c53a7c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "5796c7fb-6771-4356-99cc-20ecc419079e", "value": "24576:fI0eDXhXsbQSa0t2xiewR2rpXN/L+9+dClWdD9:AVebQzxieHpXNL+jWdD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590353, "uuid": "858dd53f-7268-48bc-bfe9-637935ccc2b1", "value": 856064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590353, "uuid": "28fe8f17-0774-4787-9917-851804bee8de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f3a267b-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "9aae32b4-aed8-4f0a-83db-2bfbdd14449a", "comment": "Malware payload", "value": "a8dd6e82423fcc0dc30b88d5fdce974c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "32d5826e-ce2c-4239-a3f4-c7f1793af08d", "comment": "Malware payload", "value": "f5974b1149e0cbca48581f25ee23a85fbff40526f0e496805a15822261e65123", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "6ae62818-0428-41f8-a011-94bb75744fec", "value": "T1C651CF217CAC521AD930B5707A1E6E41B287AADFA01C87B731DC151FA60774EE0FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "2fe00ec0-5eae-4c8b-94f6-3e10d345b788", "value": "48:3hiEUf18Gjdf9lVUUPtzvRWZFW5zvRnFDzvRwFqzvROnFOCOH6xfXK2piXpJSbJN:eF9lGERvRWZFW1vRnFnvRwFOvROnFOER", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590348, "uuid": "4fb7c8d3-9edd-4db1-9636-d7e37edeb9b4", "value": 3045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590348, "uuid": "ea46b9ef-4b2e-42ce-991d-a12bd515f480", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7efe089b-2e1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585947, "uuid": "0a57d351-f57c-492c-8c00-c3bded85b672", "comment": "Malware payload", "value": "e3bcf6c6f4d21e8a1e2789e981366973", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585947, "uuid": "02e4360f-d1d9-4286-8f71-14d122c97c08", "comment": "Malware payload", "value": "617e6896100c4289af8ec35ce7b719ea50c18d006b1e4e4c5fefdbee65b6fbbd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585947, "uuid": "fb1facef-fe44-4006-9d82-979fa46ea6f6", "value": "T175563351F0409836F039147A34F984A2B47DBC724B75598BB3A93E721D393E8267DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585947, "uuid": "d00bc833-6ca3-464b-818f-d29d70c8bad2", "value": "98304:zaejLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dfe7u0MEGCD27/Xn:7veFb5X0f/o77MvcEyG7udlp7/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585947, "uuid": "a0b45c1f-0bbe-4e86-b210-abf7ed1172af", "value": 6247290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585947, "uuid": "cbebbfba-5be9-45eb-9aa5-623bc0d82021", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "855fb349-2f4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "ff7f8838-9856-4dfc-abf6-75f3ffe23217", "comment": "Malware payload", "value": "1d09722278347003f4bea0dadb1d6bb3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "be4cb469-7a4a-4ff8-a598-8f9777ff1d84", "comment": "Malware payload", "value": "58668d176334ccb757df42c566066075632073dd5a02448162632278067a6fd8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "9992c6df-10ce-498e-82d6-d0774d94ae62", "value": "T1562130064D4B42263676C874CA112248F15AF283F91848E3F13639814E6B64ACFFED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "44c43974-8fc2-4a39-944a-9a352353c418", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpCuw1RpR16Ggq8L:JpOI8nhAHlqkwLBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590349, "uuid": "36cb4107-4cff-4790-aa12-0d65ea9b9379", "value": 1202, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590349, "uuid": "0534076d-c966-43ea-bcc6-b1ca98fe982f", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96baab26-3240-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "10fb4281-2249-4dc9-aa36-bf88650ff1fa", "comment": "Malware payload", "value": "f8f6fd1ac73724a8dd4b9f2b70ce0d92", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "d4bb8b74-8edf-4617-b213-1179ce005588", "comment": "Malware payload", "value": "c773c8b6d2765e463e8e86b1c571ecbaae356ea51d9b86e7846bae5729b43303", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "0579240e-9b0f-4b6d-9ad6-f89e788e80cb", "value": "T10BB42345121EB887042C3BD302FD9BF27D825BFE5D26F62A7E207C4ADAA0B1E55D25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "15020a86-1909-474d-895f-4cb1371ab599", "value": "12288:4CegCW60sZfQzObH2AdnqWqps+EMCubACdAX:kgC90sZozObHvkWqpsZ1ic", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "7d2d2cbc-34db-49c1-b086-79c4cfb393f2", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "76d9bb57-4092-4231-b581-f1cd54109598", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96c37f96-3240-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "92dfac95-716e-48ec-8bf1-0514d23faaca", "comment": "Malware payload", "value": "f7e8bfbb1f03fe955a185a2f29517fa9", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "4442a73d-0e72-43ce-a278-bfc61ce8d141", "comment": "Malware payload", "value": "200c981909b9bd449214126389e9e8e52dc30ee233b30d6d2f8437898f03c0e7", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "c92f078e-4156-42bd-b89f-66e0bd65e5f4", "value": "T1CAA48EC397511234EF4C5582A423FDFF8D2032D52211B9BD6B1CFBAC7092AE6A5E52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "04eca44e-b881-400a-9b3d-5d38de0f5e8a", "value": "12288:oHJ1DzaU4vbnAJ43govr0MdNiZ0Wimqmrdip6:4DuU4v0JApvxXiKWXwA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "6169191d-65dd-489e-832c-402ab869a879", "value": 482660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "600d7a8e-be9e-4d21-a90f-f47d1f924f4e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9707ae1b-3240-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "f8a4dce6-e4ee-42db-97d7-3f66a5fd4428", "comment": "Malware payload", "value": "6df60562fc871f70f04486d892729cdd", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "05078fee-ecc5-4c14-bc20-65e068ee4b32", "comment": "Malware payload", "value": "8d98bac58bd662874dee9af03b68863ffd61b5e935f06991d62f7789c55365a1", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "93575660-f1fc-4479-ac9f-eaca00a307af", "value": "T14BB4233C7EDA3ABB7FC175497082C79D8EC33788B3FED9606A22115A057195293216", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "2d439dc4-49c3-4358-97d0-34ed8d0527bd", "value": "12288:qPyemgHzvVW3imsmHATY7zsFg8IkiD0nn3iBo:kXNnmsikLFgcnn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "8e0453b3-0588-42e6-88b3-219ced6e73c4", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "71293aa9-926d-44ec-9244-40304c4eb7a4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9716ada9-3240-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "7b2f69da-bbf3-475f-b6ec-a00c709a28e9", "comment": "Malware payload", "value": "ebc603f013333acdb9edeeec3419d49d", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "d2b7413e-6deb-4266-8891-88ccdfc1f45d", "comment": "Malware payload", "value": "d56548cb4c363a5243f55e8602b2f45050cdcc89fae1dbe79f38488a4cac509b", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "3d4b6c30-ceeb-4c85-8304-69f0a8dd7841", "value": "T1F4A4BDA3F9226239DE4C125580117EFF6EB074EA0151B9B9AD5DF3DD3420EF238A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "408b498e-cd21-4984-ba24-6418146a85fc", "value": "12288:csVvbpPRUXp7tTtPrZv1FjX1fLM/CW/lezOokc4:5jpP+1VdvfLGwzR8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "d8e60e48-cee1-4248-afb2-088c17db2002", "value": 479228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "47fd8dc9-894d-482e-8d83-4db3f8c58865", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f155af91-32bb-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719578466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578466, "uuid": "c44c53c8-d4fd-4356-b650-54630c1d1577", "comment": "Malware payload", "value": "5b9aca427f7eab7f69ec58fe174db519", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578466, "uuid": "a71ec642-6d01-40cd-88dd-e67ff1aa3d4e", "comment": "Malware payload", "value": "d79eb20ab13757e2bd457c7a7c16801d5657edc0bbb2068bc26effa9f26e71c4", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578466, "uuid": "7d91046a-0af3-481c-a43e-115dd4d9f65b", "value": "T1046302EA8BB56FA770261E7CC2DD91A1F5006461733794ED1CFDA4C401798B9AF08F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578466, "uuid": "2db85df7-8c47-4890-a4e1-89e0a80b3c97", "value": "1536:tK8iwWtQA3opcjIdbtS2tKDt0buTso1MW/6/NENMq:tRGQbpOIdbtS9t61JNK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578466, "uuid": "8bd2be24-97b2-4cf1-8e83-3cfd8c8d411e", "value": 71256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578466, "uuid": "880575b9-c266-4092-b06c-10bd3e4fab89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "809c424d-32cf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594312, "uuid": "7c7caeb7-2799-4c9e-bf42-b6527c657b56", "comment": "Malware payload", "value": "86b86860a774b63e94ab71232b56c843", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594312, "uuid": "3dc7b48b-e099-4632-bea8-cd23b297bd2d", "comment": "Malware payload", "value": "27ded39b757b17c4eb0737b0154abad0a55c2f6f951fe176a6557ba962af422b", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594312, "uuid": "71e07743-54f7-4eab-8e90-a3762aad7b33", "value": "T135B42331328BD93975A600DDD60071D7F8BD29FC69C2226284B3DFB4A119126ECDB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594312, "uuid": "bfdfa395-637b-438b-9cac-ea0538268634", "value": "12288:YkdorKxn8RtwbJVR8iqQW7ijMc+/8bzTz:YkOKNpdTJqQgjQzn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594312, "uuid": "cf712133-dca3-4c4a-b591-d7df48708109", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594312, "uuid": "1821a3fe-77fc-47ff-9e8e-81ec3aca6e55", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80e357f7-32cf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "65047fa1-7ace-4133-ae00-55f749ed487d", "comment": "Malware payload", "value": "784c8198c62636b5f462e9192f92c8a6", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "3e85e9ac-7b98-4ea4-9937-6ab981eb57b6", "comment": "Malware payload", "value": "84c075afd88970203de049bb367e76722925ac1b8eb602501c0f3024273cd4d5", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "292f565b-586a-42ec-a007-c5295035065d", "value": "T1F3A49CD3E912113AEF5C1141A5117EFF2EB531A70461B9B96EADF3DC30A1DF228A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "3b638f01-246d-45b0-b592-2517ada347db", "value": "12288:3MIOIVY2FU8wJ1RxJBWw938H3L7BFmG5ffBhB:i5uzwBxB9UL9sYh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "ad575a37-ecf7-42b4-bcb3-8017dba76e7b", "value": 462268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "d93d2ce8-5def-473b-8674-0a0eb1fbdcad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c6027bd-32f0-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "4193fcd1-4bf3-4ad9-aa65-2f4b2bd65540", "comment": "Malware payload", "value": "ce3d065bfc4261060ddfc8dca15898a4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "d168d07f-aca0-4b9e-ad4c-4e0053d1da3d", "comment": "Malware payload", "value": "af008bfc605891eaaa3fef3579104b8eba30f9a19987b74c8a53287c90e6eb9e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "361547b8-5306-4193-86af-73fc07493112", "value": "T191C4389B9113C1259B6D5C0F4C317EFA19A072D7BDCC386C7DD8B3CA32928AD1E5A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "cd96da79-11b8-43be-9dd9-572427f9b8c4", "value": "12288:uO2zM83SXhcaRqSGJ+UBu0fyWjAknOl0LjL:WzMOSRcOqtJ+UBpfhN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "abc4de83-e644-4628-a9d7-f061ff029c1e", "value": 547668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "33c6f138-e812-4190-a0b6-dfd68ad7a1d4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c338f844-32f0-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "afff2874-6822-41b1-aa04-ca1f9c8dbe77", "comment": "Malware payload", "value": "552610b4f82348e24611997a76f41e7e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "9f5147a5-7875-4790-bd94-b2f1208b5bde", "comment": "Malware payload", "value": "30f516d98b1508c3fe3789d1d4e741f01b5613c9b6b48f3a8a60588423f9b40c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "eaa60e09-f526-4acf-a3b4-25ea0e80987e", "value": "T14FB42391E7F8EC6939418ECD90552F6745E88C8E6D421CDAD2A6F66FCB2E21F44EF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "cb027255-025e-4938-83be-01384f0f7a4e", "value": "12288:57t0LnP4AdnGUv5U/lZAyXs4BxdPMPizWzPBdeIBI7i4:5iLnPXgNZd8EMrDDe+I7i4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "51a4165b-84a8-4d90-94e0-b36e2caff9c5", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "5778a442-bf84-42b3-9ee0-cefb9aed7dff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db78d283-331e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588912, "uuid": "3a43d67b-ee8e-4de4-bb4f-e8744d03e74e", "comment": "Malware payload (Mirai)", "value": "a02a78a62399f13282f19046c4ac223b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588912, "uuid": "edc18a73-9177-4d8d-93ef-4cdc141a1588", "comment": "Malware payload (Mirai)", "value": "4f5fb9605d0d90e16b10e378ec1c724b26cc28368c1fad4d705a26bcb7b5aef3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588912, "uuid": "639c389e-b2cf-4b6c-9ba6-feda07de87d1", "value": "T199E34A07B4C184FDC4DAC1B44B9FF53AED32B0AD1238B16B27D4AE262E59E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588912, "uuid": "effa8fdf-39e6-4acd-aac4-6933c8461a7d", "value": "3072:mTUTfCdO6FFtoqW68wKhc/t/ekNaogMewcgsK027u+OlG:mTUTfCdO6FFtoqdwwQdjG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588912, "uuid": "9e54f1fe-d9dc-4544-8940-c2f71fc301a3", "value": 143832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588912, "uuid": "78dfda9d-5da8-4d5c-a3b5-26aa758f17d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588912, "uuid": "b03840ca-913d-4434-982e-be19637ce8f9", "value": "t1785132b438253994b2fbba3ab30af991ac71095419e131d1dd73b8e2de167c40e728", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d860a3b-3352-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719552246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "c3907d75-4ac4-4b85-8409-c886b487fc21", "comment": "Malware payload", "value": "28e5adc0749438759ccad04681f395e4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "f8c316ed-da87-453f-9f5f-fa0d2420192c", "comment": "Malware payload", "value": "47a817f85453e16e52d201810fd5a719a1fcb01c49dfd350a2fc36fef42ac442", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "c4700b6d-5d67-4789-b090-8349d3026e31", "value": "T152A31234336EBD4EF6151FF0B4C119E905564723B19D369B0E2A188E7017F9A8A19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "9e214486-82ee-46e7-b1b3-7991e6daa1e2", "value": "3072:wGUSliz0dH2QskPV6+Mt/5z8SyIW+5Iy5iFW:lUSlfB9skPVEtBAc2y5ig", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719552246, "uuid": "503797e9-bdbd-4dfa-b072-e5997f7efbe0", "value": 103988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "0d23f1f4-6c0f-4df4-a63d-799d3794b351", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0223878-3352-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719552246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "ea9dbba6-38dc-4780-b834-e70ed8487975", "comment": "Malware payload", "value": "5f9a82f873e71e023fa72a03c6f91bb5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "fa4d14f5-e2fc-4dd5-8563-7ae2ab5e216c", "comment": "Malware payload", "value": "8c13fdcfeb87abd390f487e9d51d7edcdd6073951a5f96e5c0b1f7d899874932", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "250439cf-0649-4fca-9a03-beb0b6320075", "value": "T11A730225327FE94EF3451BF078C41AE802964727B28D739B1E5624CA7057FDE8628C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "aa80543b-b52e-48f3-a44a-c1481774453b", "value": "1536:HQGUSliUwsf2aH2CyQwvN6sWLLb291q6+6EKft/B6CLP8SZstBkqPyB6:wGUSliz0dH2QskPV6+Mt/5z8SyIW+6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719552246, "uuid": "3195b5c3-4f33-4770-8ac6-3fc0c35eb7c8", "value": 77924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "757e1ed0-cbdb-4043-a99a-21487cf15f44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6d9511-3353-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719552246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "accfe12d-72eb-4c48-bbd6-ee2e557db0d7", "comment": "Malware payload", "value": "08345ef215fe7bc4661157dd8b4573c5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "13338932-54d2-49d8-92db-d596bae77065", "comment": "Malware payload", "value": "24f6c1b06912c2d8d46c6ac10737fd8efaaf7d18b227279f9dae584a5625c0c6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "99f60ebe-2466-468f-9358-adabfa12f990", "value": "T171A3122432AEB94EF6141FF0B5C219E9055B4723B29D369F1E6A188E7007F9E8614C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "1c7cddbd-7433-48da-8fb0-ba9ab9c4af5d", "value": "3072:wGUSliz0dH2QskPV6+Mt/5z8SyIW+5Iy5iB:lUSlfB9skPVEtBAc2y5iB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719552246, "uuid": "b5d7a80d-17e2-4e77-8ff0-4570e87c92f3", "value": 101396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "cbfb5c31-d579-437d-bb62-6fb7f093cba5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e29cde68-3355-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719611013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611013, "uuid": "e65a49ac-709d-40c6-a095-b6b09fdebc9c", "comment": "Malware payload", "value": "5b8b8ec9e14166b068cbde8974e278ce", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611013, "uuid": "282a2717-d065-478f-8876-69df27cbd320", "comment": "Malware payload", "value": "f567eb23dd95fe66f925bce074253f46263b0916de62d8850dd8c3ac35efc72e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611013, "uuid": "d2d3d424-5491-4396-a574-d924d5f419b6", "value": "T159B31234379EBD8EF6141FB0B4C10AED05564723B2AD769B0E2A188D7017FAA5624C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611013, "uuid": "ff5f1a3f-3cb9-4cd7-b033-2de9062d7d01", "value": "3072:wGUSliz0dH2QskPV6+Mt/5z8SyIW+5Iy5iFjEd0twC:lUSlfB9skPVEtBAc2y5iS0aC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719611013, "uuid": "066ad410-4574-4db4-935f-20ae36f80407", "value": 109172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611013, "uuid": "267a9f50-d1ca-4435-8c96-a3824a674044", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6f8a14a-3355-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719552246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "fc5fd2c9-ed6c-49a9-8aed-6dcd72a57f65", "comment": "Malware payload", "value": "f65319cb32863891aeebdf278b69c99b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "aad564e1-8899-4686-9a44-40736285a83d", "comment": "Malware payload", "value": "8491781afed15ad4fa80b176c3516cd3b44e7880a559ab22899b216be74cec48", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "e9b4e9a1-4e45-4a90-84dd-0a499141da2e", "value": "T158A31234339EBD8EF6141FF0B4C21AED05568723B199769B0E29188E7017FAA4A14D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "3a0279b4-03b5-4725-b457-c5247e77f3f4", "value": "3072:wGUSliz0dH2QskPV6+Mt/5z8SyIW+5Iy5iFjEdA:lUSlfB9skPVEtBAc2y5iSA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719552246, "uuid": "3407975f-6c83-4cc1-9fc6-9c03773e1802", "value": 107044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719552246, "uuid": "ebd684d8-fc50-4101-994f-b4372ba1518f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4856e6bd-3356-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719535707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535707, "uuid": "db4121dd-dad6-4e4b-a305-410785b16e50", "comment": "Malware payload", "value": "cf070a422ed0282f6d3a7afdbe8a72b4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535707, "uuid": "d095b2e6-a471-44a4-a2e6-088832398320", "comment": "Malware payload", "value": "a2e4f1eead7d430cf08d33e04c48adb2af23b71ec4c633bc6b88d870c1d61a56", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CinaRAT", "colour": "#c1e7cb", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "KPOTStealer", "colour": "#1d4881", "exportable": true, "hide_tag": false }, { "name": "ModiLoader", "colour": "#792af1", "exportable": true, "hide_tag": false }, { "name": "NetWire", "colour": "#5b3748", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535707, "uuid": "3501c0e6-efee-4eda-bcec-51982e81e1d2", "value": "T113A3122433AEB94EF6141FF0B4C119E905964723B19D769F0E2A188E7017F9A8A15C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535707, "uuid": "281890ab-acf1-4929-a769-8e63aaf5e254", "value": "3072:wGUSliz0dH2QskPV6+Mt/5z8SyIW+5Iy5iFo:lUSlfB9skPVEtBAc2y5iC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719535707, "uuid": "963af6f9-ac5f-42de-b06e-c3f09a0d0f58", "value": 103412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535707, "uuid": "5fc0f34d-fc73-477a-b64a-dd5a4cf2cacf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b865111-339b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1719562026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562026, "uuid": "47f5a019-f93a-4076-9d43-419de205f176", "comment": "Malware payload (RemcosRAT)", "value": "681f318b1d7a8a9505e6b3ec626a8988", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562026, "uuid": "d731cecc-ac84-4c90-b83a-fa0f7a2c7570", "comment": "Malware payload (RemcosRAT)", "value": "0fc03c36db0ed1bdc097436804a46cf5a3ff667ce77291ffa637c0ec506fe552", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562026, "uuid": "aaf1ecba-8b2a-4218-84d6-e370b64e3280", "value": "T1FE04FD2EE74F0955DF55967B034A4A4A06FCB33EB38140B139AC977437ADC2E4A628", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562026, "uuid": "ed42c3a1-2623-420b-a278-fa2790e7a157", "value": "3072:4KyoL+hG06YT+XgrC8cpexJDF4Mw7Dmvx5nl+ZGvKvdbl4hrT:4VoL+hG06YTKmC8lxJDF4MwWhvSbl4pT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719562026, "uuid": "92842bf5-733c-433e-9e1d-efca03362c7b", "value": 183224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562026, "uuid": "abc7b72f-d341-4f70-a5da-b66d91b59e82", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31154118-339b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "4bddab96-1d7d-4d1b-ab36-7a9521ec666c", "comment": "Malware payload", "value": "86a861360264659ddbaa35e4445071bc", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "d75ed877-a1f8-4794-8244-d71646b9ea2b", "comment": "Malware payload", "value": "44528237d51f85e4f47dd3f43a861f5a09f891c84ad5366920f0c44acd89638c", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "90dab10f-fc46-4885-a52e-3db892483e1b", "value": "T1EEB423E08027D067B1EC40E5A49617E3CB3AC58B2648D06F38FBE771E66551D80BA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "a7f6fc8d-ee3a-420a-9450-737ef026183f", "value": "12288:HnRq7A5+7ApHjuGMXuulYjFU9Qgj+VYhtMqgfEdSEzyv6/:H07L7ApH6XXuuxZPdiC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594311, "uuid": "17f09864-c69a-4833-bf14-dd7080aaa139", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594311, "uuid": "5d99813f-f774-4d66-bc30-50217bf07014", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c920556c-3405-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719609387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609387, "uuid": "4d68d095-366c-41c8-b251-9573943112f0", "comment": "Malware payload", "value": "01622664c6bf1a51484157d73fb4a42f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#4B557A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609387, "uuid": "bad6b89c-eb02-4794-9c2b-58c3cfcdc06d", "comment": "Malware payload", "value": "4a69a64d652063b65cfe7f7ad5e54491b06547c783d74147c79cb9145536cf26", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#6C3483", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#4B557A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719609387, "uuid": "ee8764fe-fb98-4f64-a804-415d9e8e7065", "value": "T12BB31234379EBD8EF6141FB0B4C10AED05564723B29D769B0E2A188D7017FAA5624C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719609387, "uuid": "fb9b338a-f4e4-4907-b839-31073d0b14ef", "value": "3072:wGUSliz0dH2QskPV6+Mt/5z8SyIW+5Iy5iFjEd0twj:lUSlfB9skPVEtBAc2y5iS0aj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719609387, "uuid": "de0bb16c-f360-4766-b73f-9f64021069ec", "value": 109279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719609387, "uuid": "752f8094-d349-4446-95f9-c54752568131", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db2925b-3418-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580236, "uuid": "4a5b5e20-0235-468f-ab6c-16ef894abf26", "comment": "Malware payload (Mirai)", "value": "aac586171eb25dc34203948edbf2bd8f", "object_relation": "md5", "Tag": [ { "name": "BGR", "colour": "#09f772", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580236, "uuid": "97632c63-ea53-4fc4-828e-538e8d8a5d67", "comment": "Malware payload (Mirai)", "value": "771eab8ba805357eb3f61e1eb21ac208dace8c72aee4fc6e8fa566e6e0dec713", "object_relation": "sha256", "Tag": [ { "name": "BGR", "colour": "#09f772", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580236, "uuid": "2a2edcbc-3da2-4b0b-9f4e-ea3bf3a69b89", "value": "T1FAE33C46E6404B13C4D6177ABAEF42453323AB6493DB73069928BFF43F8679E0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580236, "uuid": "a62d1658-0ce1-43de-ac1e-f58f1032c2f2", "value": "3072:073/E1acW6IznFIXQkpT9mowSh3UseAEkM/9HFDhc//U:073s1acW6IznFcpCW3UseAvM/95hss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580236, "uuid": "4981f0e1-5adb-47dd-bf58-57f174754e53", "value": 148146, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580236, "uuid": "d5aea104-5f6f-456d-aad4-66bb75bd9662", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580236, "uuid": "3c9af403-678d-487f-bfb5-d12e91183d5b", "value": "t1ae210f355730421a6aa1dda0cdfd57b2161892672348af33df32c48c541a09eea3fc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934c2394-345c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1719573250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573250, "uuid": "ae0f76b5-0ea6-452a-aedb-d4d052ff1663", "comment": "Malware payload (RemcosRAT)", "value": "754afa956c6d0b094fd95ce3a6ce7d76", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573250, "uuid": "f8a2cec8-b8db-4007-9970-f839a116ff8a", "comment": "Malware payload (RemcosRAT)", "value": "aaff2d2348682b0d960debdd8e2fb0845988fa6cc3696a5b13f7dee2826fe42d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573250, "uuid": "c6566c99-0089-45d6-b203-d59da54a2ab2", "value": "T161E4B0B99295AC9F0E1D0D66F408174A5C6C44D7F678C2F87E82B4F88A960A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573250, "uuid": "54349414-e03c-4d21-9df7-313eead1e131", "value": "12288:agfhLWw+hRizqo36P+F9QFojBXC2slenIFHrg+j3VSA:tJMszqoKP3ojBXC2ienIFLNjlv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573250, "uuid": "da3d9cab-23be-4168-9e2a-85bdab0c2e44", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573250, "uuid": "f8b2c508-3cc0-440f-81c6-95837b7fc0da", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b0f511-3498-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1719557348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557348, "uuid": "cf0f3a07-ab70-454d-b1fe-26bde9cd3c8f", "comment": "Malware payload (MeduzaStealer)", "value": "1743b9303a76e843907a46c5202b00f3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557348, "uuid": "15244e05-28f7-4508-aa58-2eb6d4f06503", "comment": "Malware payload (MeduzaStealer)", "value": "478eb22a1f1be2ef6e70625cf42ca61c716389135acbb705c0e21f0cf330bf46", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557348, "uuid": "3d4e2f3a-cec5-4f29-a124-2f5dd8e9ea5b", "value": "T127850A0A2B3F4A99C51188BED23E1173D969BD1CD028B5748EC44B457F92F6096BE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557348, "uuid": "7048f943-7a93-41d3-b6a4-0d4642ed0120", "value": "cf3c1817c9d16be6d7625ac7e9642807", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557348, "uuid": "1b269aa0-51b4-40b1-b2c5-40040683ab88", "value": "24576:5UWFBXwhWTtTWITNYeGQEq+3iu8kEPGIyQ+cwa+Djo8+ST2Sjm1vkAyGcjgP:+Y8QD7BHyQ1EUvSaO+9Es", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557348, "uuid": "e000bd16-ab8c-4818-b03c-10fb38ac6366", "value": 1843712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557348, "uuid": "0215efdb-9aad-479c-ae83-10cf571737aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8a8a60b-34b9-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1719557415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557415, "uuid": "43d7e1ee-575c-417f-94dd-6be776bd2906", "comment": "Malware payload (RemcosRAT)", "value": "71ee0c2a6053262bfceb4cd2b0aa4117", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557415, "uuid": "8db02288-574b-40d8-ba58-0931f3825dde", "comment": "Malware payload (RemcosRAT)", "value": "d1eac8661e9251814c1e918854f9cad7040a46fb11cf0cd289c1f49227ad4efc", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557415, "uuid": "f6c56015-f67a-4bff-8e86-4efe8b1daba8", "value": "T1FA04DB6EE70F0965DF55977B034B4A4A05FCB33DB28140A139AC977437ADC2E4A628", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557415, "uuid": "70a1077a-f9c3-4061-a98f-04409cb74fa7", "value": "3072:g8DkPGNL8VjP7kv5kqAREiMcNc7KnEwqtbUexABQ4WfVloK:g8DUGNL8VPkaDeiMcNc7KEFbUeaBQ4WR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557415, "uuid": "6771fcc5-431e-49d5-9f75-0f0ca43b2425", "value": 177694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557415, "uuid": "13f8ba11-7535-46f1-bf4e-f563a3308c5a", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da13dd83-34b9-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1719557418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557418, "uuid": "3e9b4eda-66c1-4070-9543-c6f727efc71c", "comment": "Malware payload (RemcosRAT)", "value": "7c2062256791e635e858dbffa5a84b7c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557418, "uuid": "7563b250-8052-4b61-839b-dd6a25644569", "comment": "Malware payload (RemcosRAT)", "value": "e3bb9af6f04480ac892d4c6a17ba1a711cc73b126620af7dbb5bfec4a271373f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "6f4d0d50-48d7-401c-a9ef-f973c8abbd87", "value": "T190E4B0B99295AC9F0E1D0D66F408174A5C6C44D7F678C2F87E82B4F88A961A04FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "ff01a127-825d-4a79-8f4e-f8fb4c8b4be0", "value": "12288:aEfhLWw+hRizqo36P+F9QFojBXC2slenIFHrg+j3VSx:xJMszqoKP3ojBXC2ienIFLNjle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557418, "uuid": "a83a83b5-515e-4088-8ad4-c27634c36c0d", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "bfce8bb1-bdc5-4541-9684-87cfc53392e1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e04411da-34dc-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719533015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533015, "uuid": "833a1a51-c614-43b1-beb2-618472c523c9", "comment": "Malware payload", "value": "06a0235b8deda2be664358a9c33a0bfc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533015, "uuid": "63dff6ee-b121-4157-817c-6205015b346e", "comment": "Malware payload", "value": "8d6abec9410e22636e7131f11b6e59a70047ff759658558b0d5817fbc8af7f41", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533015, "uuid": "2053c5b7-7678-4011-8536-42897e537318", "value": "T1C2159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533015, "uuid": "828ad1c9-6a85-4bdc-b184-398d2de61416", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533015, "uuid": "98de6ffe-cc58-41f8-8e02-9469c2a924af", "value": "12288:mqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T5:mqDEvCTbMWu7rQYlBQcBiT6rprG8aA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719533015, "uuid": "63f14edb-7737-4588-9e73-72372ea438eb", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533015, "uuid": "ecc4a9cd-f437-498d-9553-36a17c84c168", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c4acfb8-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719533228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533228, "uuid": "155463d2-bb2f-45e3-80ef-efa663428797", "comment": "Malware payload", "value": "4afb46e335ddb451a87759a0e3baf1e3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533228, "uuid": "a4862e74-49e2-4e0e-affe-9394dc3da309", "comment": "Malware payload", "value": "fa8ca1240635dc17af1c660941442137bd6eb7526b3bc5fc8a31429ae83db8ca", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533228, "uuid": "fa277b1f-a726-40ee-ae84-1a330f774a8a", "value": "T15DB533BC9D231536C6A233F54833EEB45F743828CAA6A7515707B29EB46718783534", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533228, "uuid": "30603f54-989c-44aa-8f4c-d8a995b1078b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533228, "uuid": "20611804-22e3-46b9-8f66-186cb9a8bc7a", "value": "49152:l2Iq6UHmMwc4hLJ+kQXn14TEHzj7VEMqOgsfs6wuR4cagTpLmJzFIs:4IVUHjMZOnyoyW0aZTpLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719533228, "uuid": "f2bb6d63-7a1f-434c-9843-a5d0085a2adf", "value": 2402816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533228, "uuid": "98a7723f-f462-4815-adc0-35f2e01a11c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4020780e-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1719533610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533610, "uuid": "1b1bac23-a63a-4fc1-a604-31ed56b6d5ff", "comment": "Malware payload (Socks5Systemz)", "value": "4bcaa91a1cd0048e4453abfeed64930c", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533610, "uuid": "2f89de22-78ef-44a6-8418-d760d26db425", "comment": "Malware payload (Socks5Systemz)", "value": "72485167b9cf6920dd0e17d1e432828f109a16ce4f9c4c0a83a0d2aa3f400135", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533610, "uuid": "7a1f6de0-2045-4fae-a6a1-c8827e74a269", "value": "T1C73633048293D6F3D4A78730297B8157DE1FF37F2DF9A900A1309E0C57261A968AD7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533610, "uuid": "2b9aa167-6b14-4df8-af39-f884de389902", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533610, "uuid": "bfe37d63-aecb-4f41-806f-5eeacba5a0ac", "value": "98304:ClA4j+L5xsiWwb8Ry+vEBzYDIq9qVLa6UinSSUlYB+0p4T6/M3aFIkQxcMv:NE+L5xsJwKvAzqoaLlmpQ13afQW8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719533610, "uuid": "0d2b7cc9-ac13-41b1-a86a-4603ee61a7ad", "value": 5232527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533610, "uuid": "ca2267cf-34b0-46bf-94cd-db58fe910628", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79c68fbf-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719534137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534137, "uuid": "a4cfec67-b502-4fcd-a511-84384262b8a5", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "1ea5c7b6d91d2002e4dcbd08e31b5611", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534137, "uuid": "6ba9fb59-4b8e-4d1c-a8b1-1e357bf0fcf8", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "ef709531046bc4a19e4f5521d6b7cc61e8b2c32d073057fb7aba0a477bda2653", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534137, "uuid": "1f91364a-3cb7-4f13-9660-7c97b9c1c088", "value": "T16BD4CE5375F1B915E3B64B301F3996DC3BBF78A26C71836A61002E1A5B366A0F9037", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534137, "uuid": "a2f46252-6ef8-4e0f-aa6a-1988254d751d", "value": "ece384bb259d83e8bf9a2ff95ccbe4a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534137, "uuid": "c333c8ee-5a51-4ad2-b1bf-4a9d2e2ad2bb", "value": "12288:q5DT5TmSVGgPSz6mHuuSD27eakj/ZteXvr:6RxVGgqz687FkLMvr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719534137, "uuid": "7e62daea-7040-4a9e-a691-39ee2ed50abf", "value": 622080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534137, "uuid": "7e214cda-7c96-4dd8-8249-1830b6fea722", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e75d72e7-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MarsStealer)", "timestamp": 1719534321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534321, "uuid": "1c7baf11-6d1c-49f8-baea-0c760425a233", "comment": "Malware payload (MarsStealer)", "value": "97ddaf205149ee9833a9b79cbfa33e68", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534321, "uuid": "5d2ea078-aae5-4b39-abbe-d4547e4807d3", "comment": "Malware payload (MarsStealer)", "value": "54f23a532632a9cdedbb727e94e34eda312f1e84f7d1910210f7548d97902798", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534321, "uuid": "343428ab-60e3-4bbb-83f7-9bb5b5b47edc", "value": "T1B8B53399EAA3FFF9C372C43146827C3D09F801E10D53E946D7B209B1E5418A99D76A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534321, "uuid": "3249ba8f-dd45-48ce-acd7-c4529112fa96", "value": "001806c33a6e9fe5fbff34bdbd79b591", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534321, "uuid": "22a046fd-17b4-425b-8b75-5af98f761318", "value": "49152:Xkoj+GCMyRFvj6NIOx4ahO6+azIJL9N8P8VIJT+481icMV317u:UxGNyEVw6+aE9gP64g2J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719534321, "uuid": "520a4d9f-41c4-4a93-acfa-14ebda780821", "value": 2487808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534321, "uuid": "a9775cd2-211e-491b-a755-a543ea2f49f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b3aeeb-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719534618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534618, "uuid": "8536697b-3507-42fc-890e-d72cf4e9f681", "comment": "Malware payload", "value": "147baf4802996992bb3346811ce5e373", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534618, "uuid": "fb28f62e-e344-431a-8a08-d3f643ef32e0", "comment": "Malware payload", "value": "1f96f8e11c63c6db20ce63e1cfb31f8ac244f376c9b2b8858148c127dc01afca", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534618, "uuid": "e0928ee8-eb9c-4cf8-933e-bda032b05f17", "value": "T19F04A66EE74F0915DF55A67B034B4A4A05FCB33EB38540A539AC973437ADC2E4A228", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534618, "uuid": "ef2046a8-501c-4e1e-b495-8ae769d17bca", "value": "3072:YjzxAB2xLC+pv43UuGFbG04FRxAvmxJ9FSQaPg:YjzxAMxxA3UuGs7A8TkPg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719534618, "uuid": "998c4f2b-83dc-4342-a064-64e9746df4ef", "value": 183845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719534618, "uuid": "e94c1c19-2c60-4354-89b5-9c38bb00b461", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea88b67b-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719535185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535185, "uuid": "7a565d33-7220-4a1a-bd37-637236cf4ab3", "comment": "Malware payload", "value": "c098529196a51f8fec19fbea629cf2dd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535185, "uuid": "4fe59333-7558-4ebf-88c7-696ac47f61ca", "comment": "Malware payload", "value": "5b6ebab805cf5ca06a133be07b6f68e95b6cfd103872a05547cbc66022cfcfed", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535185, "uuid": "6f774aec-2bf9-4591-98f7-c4ac7961e691", "value": "T1DE363324529E82B8E152EB35025FE5098977312B7238DE3DBCA4F47F1E4F52E5A943", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535185, "uuid": "dcd57eb7-7c80-4721-9fed-fa3b2b96d187", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535185, "uuid": "610a20ba-3398-47fa-8394-8eba78eed433", "value": "98304:CFov53LUf9QrY2OTow4bVSHu9YkJmHSq5+vC07q7t2ydTJ2WQxcMv:N3Ife8YbVSHsISa+q07qZNTzQW8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719535185, "uuid": "032b07b9-1800-4029-a489-07915e891175", "value": 5286729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535185, "uuid": "f32db409-d67d-4493-b102-8b9807ae68b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "263d37ae-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1719535715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535715, "uuid": "5ad6d483-ccd8-474d-8b50-fd3259fd4e98", "comment": "Malware payload (Vidar)", "value": "03d428929fd7816670db915f9a80b594", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535715, "uuid": "6a16e549-d02e-4d8a-8411-dd32b982fc75", "comment": "Malware payload (Vidar)", "value": "28c24bc569ea735d4ea42bb6fc5dff20e8f86930879fdd7ccbdd771e170579ea", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535715, "uuid": "f36e2376-9e03-4ce8-ae94-a1724e09a473", "value": "T19675E062F3A2D532D1317A799C1666749836BD40293438452EED1F4CDE3EB932F2E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535715, "uuid": "40f5f37a-21be-4772-85ee-1ddc59a01180", "value": "c1cdaf8ba85a902eac0dd66ea5c9c273", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535715, "uuid": "ee03b02c-a762-4ee2-bf94-36164e0d97b0", "value": "24576:BXc46Crf8fyEacHps+/qASfmBgXk/xrADOv1xvF87uLwmnq:BXl8aEHHO+SASagXkJr4MDkUwm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719535715, "uuid": "53cc0cf7-ab5d-4325-8a49-0e9ae97783b5", "value": 1606656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535715, "uuid": "33e59263-6449-446c-aced-9e58a42d9818", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b76ae7b-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719535911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535911, "uuid": "acb6715d-4325-40b6-ad87-cb39b8d7a9b9", "comment": "Malware payload", "value": "0bd151689021ecd51fef09649199287d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535911, "uuid": "0c93f42b-4104-4f6b-abe4-afb98be86bfd", "comment": "Malware payload", "value": "68533b03f3c96afd9e4dfcf25a355e22cd12094dbb29701ee5fc7e3648eee1b3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535911, "uuid": "5a30b926-0815-4f77-bcb9-f10f1754adc8", "value": "T1A3953386E4B34DDBDEDA833E990652249F1D7195CCCB8CA8ED904970DE17D03A4AF8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535911, "uuid": "6718e97a-b5c6-4459-b4a2-7fe66a6dba75", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535911, "uuid": "b2a69327-080b-4503-90bf-3c1bdcdd6c4a", "value": "49152:cwvKoV7YSPod+IcGSothpxiAMqA003v1+xTJLxaLy:ciYSzIcGSob7MZ3slSy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719535911, "uuid": "4a54fb65-2401-4657-9727-9a3891deea45", "value": 1913344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535911, "uuid": "8667e179-4753-4e24-a619-d3db97ec281d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd143808-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719535994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535994, "uuid": "6e07c88d-34e9-47d6-af0b-7a2825e21199", "comment": "Malware payload (GCleaner)", "value": "2ca7d4b9098f5255bceaa813e12bacbd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535994, "uuid": "b90ea124-1d4d-4915-ae38-b95bea7b87a8", "comment": "Malware payload (GCleaner)", "value": "b07790f33b42ba3afceb3669484c1f7128b2c3afd96850b9bfb4f0fb8c2c8bb1", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535994, "uuid": "fc42cefc-b416-4436-9a24-dac5ca148bf6", "value": "T14474494376F1BC25E2A34B345F7896DC3B3F78A26C71836A6100AE0A5B752B5E9473", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535994, "uuid": "740522d1-04c2-47da-88a0-fb7d70dde338", "value": "ece384bb259d83e8bf9a2ff95ccbe4a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535994, "uuid": "5b9e72e1-2a0f-4cb6-b1e6-17350c84ee4c", "value": "3072:k9lOLXp35hc4asjn0Vf3Xjmm+72uVyPXjmG2q3iR511+ZtQXGDSXvHAddkxrj:vLXpph0lzmm+6nmG2q3BZtQDXvnrj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719535994, "uuid": "de1030b3-88a5-4ff3-9ed7-ff1ac8ce9a3d", "value": 340480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719535994, "uuid": "a46a3b1d-3005-4b87-98a0-97fce6191ead", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dd3b7ff-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719536345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536345, "uuid": "44a52715-49a4-4564-acfd-aadd55fa9655", "comment": "Malware payload (Mirai)", "value": "8a86c6d8d693475dc5e2b1735e8fa81d", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536345, "uuid": "45e089dc-2de5-4b02-8161-ef732712c9f7", "comment": "Malware payload (Mirai)", "value": "583ed12a55a4516c3306ec9e53eb55ff5b33e7da3bf3dd27397da123f6361db3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536345, "uuid": "68aa7922-517b-4d2d-ad79-ed6f6876f5c5", "value": "T173732927A74184FDC059D134773EB93ED93374FD1229B29B2BD4BA722D8AD220E09D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536345, "uuid": "65fd3115-ee7d-44a4-96b4-889c98a8aa10", "value": "1536:N8evdk9vjNJvw2SUYWOYRwRV8AJPRm+sbYVxBa8yBA1gwSNLW:N8evdk9vjNJvw2SUYWO6wPlPRm+sbcxX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719536345, "uuid": "086cc719-c211-4c46-933e-e6dfc9366370", "value": 73424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536345, "uuid": "de161869-cfa0-4425-a188-394be72c3f02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536345, "uuid": "d761e04a-caac-4049-959a-7abb992b3653", "value": "t1c21122723c2e0c94a6f7f7727386d29008341a9124e139e6e8b05cfada537924d768", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91daf6b0-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719536754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536754, "uuid": "85073602-6b54-4f7b-8fe7-d647babbb922", "comment": "Malware payload", "value": "cdf11550309ee233dce770e1f316383a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536754, "uuid": "8abf64cc-a6fd-43a0-b8fd-c99b160d6706", "comment": "Malware payload", "value": "d3c728923bddf9634696940a9605175487bb3e5cb315fc2d797a6d7180f63eae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536754, "uuid": "455d0dd1-5da0-47e1-ac8a-74a4518134ea", "value": "T187B53346B9E5C4B2EBDAD375C92ECF98332A3D3603C45B121A2B368E7055283A4D5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536754, "uuid": "f1e4edac-4949-413f-9621-eac0561d060e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536754, "uuid": "a4b0297a-4be9-40da-ab86-15d9f6e57a71", "value": "49152:1MIEGHf53c18G4YC+JrYUp8oGV1OjpgBZGrRC4V8m3kQOYn0Zu5hA:/VG55RvWCpQMrRl8mkQ0Zu5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719536754, "uuid": "0e957dcd-f6a7-4ffd-b010-48590c47df3d", "value": 2437120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536754, "uuid": "8f882804-5c32-4ab6-b175-bed991933458", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4841cac-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1719536866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536866, "uuid": "7a38bff0-8b82-4ce7-849b-3c7d6c11fd87", "comment": "Malware payload (Smoke Loader)", "value": "ac6a932b599565bdc10acfecf938c41d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536866, "uuid": "7ccaa626-cdf9-4d83-8c41-2fbf6de3d1e5", "comment": "Malware payload (Smoke Loader)", "value": "35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536866, "uuid": "a768c116-16fd-4964-9b9b-0217ac58bf43", "value": "T1CF54F55275F1B815F2B38B305F3896DC3B3FB8A26D704369A1102F1A5B756A1E90B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536866, "uuid": "9523520b-760d-49ce-94c6-c1066e988283", "value": "ece384bb259d83e8bf9a2ff95ccbe4a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536866, "uuid": "13b313be-e727-4d38-9015-8c1700ca7352", "value": "3072:uKf5LPigdxK34S+wt79duyt4J5QJ1+ZtQXGKKXvHAddkxrj:/hLPiILSTBLRt4cuZtQ2Xvnrj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719536866, "uuid": "92d8bb5e-cbd1-4fe8-8fe9-8e27420e1a57", "value": 283648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719536866, "uuid": "f52bcaa7-6bac-4b11-95fd-78492c8c368a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21ea8ed3-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719537537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537537, "uuid": "86eaa69d-c281-46c3-b34d-d5e791213a50", "comment": "Malware payload", "value": "a8330e359dceb00ac024b4343d622438", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537537, "uuid": "485429d3-754d-49b8-8fff-fd891358c684", "comment": "Malware payload", "value": "02537c2d2ec0acbc9a17632312bcd64f97a9c5126b738e1be438116e061b9527", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719537537, "uuid": "c5d3e693-6ca5-4bc7-ac7c-960fb001a0e1", "value": "T1F8E3E120AB90E179C00664755329A9A56F3F1D7110BEE887DF5519396F333E8A32F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719537537, "uuid": "d73fcbae-23c9-4f2e-8869-33e7bb28bc80", "value": "1536:BG+KN4oLwpFxytbDRqkUu8odu2r2fPehf7QCx1Wn8nNjGAlGYTD4pKZeYiLKPcB:0bmoLNDRdRdgHeVE8nlGOGYKKoYAKUB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719537537, "uuid": "a46f1590-2023-44ae-a98f-ecb2e8eb6db7", "value": 149933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719537537, "uuid": "85cca051-c0bb-4ba1-ad31-5182d24ff9aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9d2bbae-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719540230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540230, "uuid": "a97f0a44-dd06-44b2-9806-01b73ab4017d", "comment": "Malware payload", "value": "46d446fe08b9933ad0ab41cae170bf94", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540230, "uuid": "bdb29afb-7dd8-4366-86f0-67781b41b159", "comment": "Malware payload", "value": "1d3d412a624acf5983768b4b2fb246ec85afca74ecfc6696819724f251b1b1d5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540230, "uuid": "5ec58237-264e-4e5d-afdf-05ed1bec184d", "value": "T12DB533A0286B5870CB2B337089B6CFE14505B5B2EB564BAE674DF132DC38A17B5C67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540230, "uuid": "31d25240-2d1c-447b-908e-fd048bf44c9d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540230, "uuid": "43b1d481-aeae-4c93-a345-f84a52131724", "value": "49152:znsX1RWUFtx09Dk4xgKdKvRS3OL10yazosSTyH4gRPmhE7DKKCQ:zn2jFT0ZfMrL10dzDSQzmmvC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719540230, "uuid": "d295b4d8-b840-42ad-bc62-4f7afd090ddb", "value": 2348544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540230, "uuid": "6d73a1c0-0dbe-4d33-891a-b858a39021b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b515a501-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719540249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540249, "uuid": "d3c222e6-ded7-411b-bb43-bd286e7392ea", "comment": "Malware payload", "value": "05b58c8ccc81e4e15d3dfe21822f814d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540249, "uuid": "55644f3b-87c3-44ff-96f4-fc5312da38ad", "comment": "Malware payload", "value": "9ca4c35d3b0722e569464988b354d766ed47fba7dc8660daf86514bc468b2ccb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540249, "uuid": "0d5ebf1c-2cad-48f2-9725-b83cf3851eeb", "value": "T1BA95330D34699553FCA9893A10FBFF9A9F282FE451C44C4D7A07D6BB0F2BE502A5A4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540249, "uuid": "807ebbff-18c9-405d-b03e-f80b86f7ce91", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540249, "uuid": "c3256c04-e190-4dca-b737-c45a42b569eb", "value": "49152:mAmgFDm9kDKJYqQeaLDlWfltIE4binxq6Y:XBm9RYz0fldISxqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719540249, "uuid": "772ea996-68d8-4ee2-934e-9c44e1013fbc", "value": 1911808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540249, "uuid": "1134dd4f-6313-4511-a819-6652a4dbf45d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fac8eaaf-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719540366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540366, "uuid": "842c236c-5ae0-4c7b-8a44-3b3d906358f9", "comment": "Malware payload (Mirai)", "value": "86da213f5a360cc624913c439a183e9c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540366, "uuid": "47c765d8-8bcc-4d12-81ec-9b806d3dae6c", "comment": "Malware payload (Mirai)", "value": "4cd3c258925190681d2f86904fb8e1eca4dd197f7f03c01f459829e2e3710b54", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540366, "uuid": "011937a5-6807-4d4d-81bc-cb144a5fe933", "value": "T1AF232991BC828A2AC9D4137FB57E0A8E332467E5E2CFB753D9604B503A8951F0D27F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540366, "uuid": "1ad9ec95-fffd-4546-b128-147e94b42f93", "value": "768:dI30vtJYO9W/yH3UkSNYXkLZUn4nr4IYrB4Tm62HzLwJZY10Uw:i3Yto/VkSNYXDn4rAt4TKH4Ja101", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719540366, "uuid": "09541a05-a761-4116-a919-ce29b7739d2a", "value": 47728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540366, "uuid": "cee83cd3-feb8-4ef0-9674-0d56ffe828a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540366, "uuid": "e07a44e7-3d33-4b91-ab0b-3fb8421f01ef", "value": "t12de02600ac658b5c4cc79a749d9d07a4a901621354668b00cf10d7f4d83f458e70ca", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1375c204-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719540407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540407, "uuid": "f8b78ba7-8c5d-41b9-89f2-49bad26830e8", "comment": "Malware payload", "value": "8e30795a381934a50dd897dcea03f41f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540407, "uuid": "9b22465b-b5d0-4e3c-96e4-abf504b96517", "comment": "Malware payload", "value": "9f96ac6a7deaf8620101964ea9d22fe9584a5900994438a334d3e5cc64c782d4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540407, "uuid": "f715b21d-cded-4649-9ae2-fd073b61c9b7", "value": "T168159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540407, "uuid": "6fb15827-f80f-44ef-aec4-f30a3f911929", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540407, "uuid": "de1bbdd6-ee65-4528-b8a1-c60c1b52ba95", "value": "12288:vqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tv:vqDEvCTbMWu7rQYlBQcBiT6rprG8aAv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719540407, "uuid": "425030f3-044d-44f8-be05-11dba7b7e89b", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719540407, "uuid": "329cc4d5-cf14-46ce-8af9-e763de7d64ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e5ae215-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1719543459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543459, "uuid": "0b295404-32c8-45f7-81e8-0cd616caf21a", "comment": "Malware payload (Socks5Systemz)", "value": "22f8e2f2e376d18100dfa7ce119ae1a2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543459, "uuid": "6275c219-b261-46f7-913e-abfe2afde85e", "comment": "Malware payload (Socks5Systemz)", "value": "a6ecfe477b96917303399df2876ee5fe876fee88dbb452e092b6794643243c19", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543459, "uuid": "4cc7e397-acb2-4a04-ba1f-ecbaed19073e", "value": "T1BC463391F772F4F9E022D7719ABDD09E076A7E521D358D2A78496ECC8B4C8C2150B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543459, "uuid": "df87c5db-8091-42f4-b6d0-be0014242ba6", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543459, "uuid": "84b6c857-6314-4f10-8531-7abe56f7a13c", "value": "98304:CEfrNoij3/+QOkv5x49mbToGyfcz1bJG1PrUWgxBGXvn5SDbUGQBql3E1uJQxcMv:Heij3/QkhambT/z1bJGlMxBGXv5SDDQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719543459, "uuid": "2bfbafd5-62d6-46f2-a6f5-2f5e67464794", "value": 5407406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543459, "uuid": "009b0e89-94ad-4752-9829-f3add9a2f0b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7d3b327-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719545837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545837, "uuid": "9c99e3ab-4eaf-499a-a873-1b39366e4bc5", "comment": "Malware payload", "value": "faaad6455b0ea51dc86a99fc33620458", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545837, "uuid": "e9d05515-1d06-4f9f-8537-595fd5ec291e", "comment": "Malware payload", "value": "4738e73ed2a8567c8f9505dec4d08ccd120ceb76cd81387964a10e0ff942e155", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719545837, "uuid": "0563c9fe-e8b8-4c61-8160-3b849a21504d", "value": "T111B533603A895CE0D16873B5907F0F427674BC314BD2E9B31769C87FF8666B29481E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719545837, "uuid": "26c02a7c-f2ff-47d6-8fdf-724dc3162a42", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719545837, "uuid": "64dc94d2-b699-4fff-aeba-70bd5fd736c9", "value": "49152:SAZ1kek5R/a1hEqXqKoByxnksNT0nz0k270EGxDjx:JZy/a1eqXxcyxksNYYk2AEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719545837, "uuid": "e88324bb-8ca0-4b9c-824e-34f9345ab004", "value": 2380800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719545837, "uuid": "e295d71c-f534-47ee-a3e8-f4a9acad09db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3185ffa8-3502-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719546900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546900, "uuid": "a8bcbceb-02f5-4dd6-afb8-50641016cc17", "comment": "Malware payload", "value": "38c0597ee7add78c1459b241f8def047", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546900, "uuid": "0701f265-c90e-47bf-b418-54777a6b9162", "comment": "Malware payload", "value": "8ecc2865400936b90b568b433b1a32db48cb5d1236a6eac9aa597d47d51a171c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719546900, "uuid": "09dbddee-17b6-48a6-b42a-affd31899f46", "value": "T19495330A2CB34C6ED6309835289CCA7530E527597CEA9D7F59AD8AF5031B7093843F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719546900, "uuid": "612aaa01-e585-4443-9820-e5e4818876ea", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719546900, "uuid": "60fbda0d-ce92-4e41-99be-d7c2cee3b0ea", "value": "49152:a6TxaFgP1RYrO2T5TFKOXRphXRMV23r3q:rAQ1arOqFKOhp5G83r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719546900, "uuid": "8c3f3184-214b-4f9a-adf6-087dafca1796", "value": 1918464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719546900, "uuid": "990ad2cb-e7a2-4632-b8a1-0f39d580f2c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "013780e3-3508-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719549396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549396, "uuid": "0060d529-1aec-4774-a580-1bdd07c35e9d", "comment": "Malware payload", "value": "225664ac857612646869a1ff9a304b2d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549396, "uuid": "d66bec83-2a25-492e-b117-2306ee320e11", "comment": "Malware payload", "value": "fbfebe12e9dbd666b31db485a0067fc1fbddd8c5c5f5cbe38917a3a32074a6a9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549396, "uuid": "299238b8-ef26-4f8d-85e1-52c290cacb79", "value": "T1AA159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549396, "uuid": "4fbeac81-6c5e-46ad-9200-f9a237078ff5", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549396, "uuid": "895e6603-a8ae-41f2-8c60-f726989c000d", "value": "12288:SqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TL:SqDEvCTbMWu7rQYlBQcBiT6rprG8aAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719549396, "uuid": "e921168c-4291-4fc2-b5f5-9e5173570c14", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549396, "uuid": "6ac66477-8f2c-4df0-8e5c-2d6cb2f50e5c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da878f1a-3508-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719549761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549761, "uuid": "b338d784-acc9-4df1-bb33-026cb0870129", "comment": "Malware payload (GCleaner)", "value": "b1e62fb0c2fbd63e14bbc0dbb8c759a8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549761, "uuid": "32ad0a91-7493-4f0d-81a2-3c39301d801a", "comment": "Malware payload (GCleaner)", "value": "ef0b1d3c1b17e4b700f4ee78a2a078063a87ee01e23778e557f036ab2c80feeb", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549761, "uuid": "39e427bf-0278-4961-bbbb-4de4fd5a43dd", "value": "T144743942E5F1BD15E2F24B3C5F3896DC3B3FB8A26C62835A51142E1A6B752B1F9037", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549761, "uuid": "7798d013-cf9c-48db-848c-14a3106b4983", "value": "9ab579f0940038199ed136d401eb2211", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549761, "uuid": "7a27df87-2f0d-4053-a3a0-72a8df2be944", "value": "6144:3LYcF4qRjE9UP+PYUAJalV2QwFz0ZtQaXvarj:30cqYUAUlV2QwFz0Zt3Xyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719549761, "uuid": "70479427-6f51-4684-bfdf-12f387b43cb6", "value": 340480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549761, "uuid": "d98ce4a4-8d29-4ddb-8369-6e1680b9801a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59152d71-3509-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1719549973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549973, "uuid": "26bed551-8720-4d46-a982-0431cc1709f7", "comment": "Malware payload (Stealc)", "value": "a10026e6fa614ac472aa51df8271fccc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549973, "uuid": "0c3756dc-7c2a-4161-8c1a-982cae5b13d4", "comment": "Malware payload (Stealc)", "value": "5601362741a3c49770857b3ba7691c810e242b65af9fa783b3d2e649b1ec8c95", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549973, "uuid": "22cfd80f-0a5a-4238-9e5e-0c0764cc7741", "value": "T194B533B29FCB4705CE6D8B371FB0ED227EBA46C56CC096A15C57183173468B1F62DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549973, "uuid": "60323274-8d7e-4e01-b34d-4802835f2796", "value": "001806c33a6e9fe5fbff34bdbd79b591", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549973, "uuid": "8b1428fa-2ab2-4800-a6ba-eda077be8e67", "value": "49152:g4hsR2RyddVEzQ0eWXABKaOFDOLxqNp0s449Q6vjUAWU5tgvrq1YWycmwDm:gpRNx0eWZdOLxYp0m9hvQXU5+Dq1wom", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719549973, "uuid": "e8a14ea9-2e88-4c74-9d95-737ce93bfdaf", "value": 2457088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549973, "uuid": "30e93719-3bfe-4622-b8fe-fd15643def52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcadd34e-3509-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719551417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551417, "uuid": "c8967069-66bd-43b3-9226-5a75246b31b6", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "ada04f2d68147818a7744f37acb6a619", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551417, "uuid": "4c68267b-85ad-4aed-a4ec-84b4c18712a9", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "6b7d869c373be74a41f89afc77bcdca103f0806e824eca3e4d432579554baf09", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551417, "uuid": "d9d5bf0f-8bec-492b-9a39-bdd3908e5bdb", "value": "T1FAD4BE9376F1B925E2A24B305F3892DC7B3F78A26C35436E11002E5A5B766B0F5237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551417, "uuid": "fa01c4bd-5121-4cb5-9de2-ae61c03e69a9", "value": "9ab579f0940038199ed136d401eb2211", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551417, "uuid": "92781d03-f24b-4a96-b3c9-37598f8e9b46", "value": "12288:PtcBw5IVor5UDVHmOiISBplI75v7pjBCgIk2CxZtSKXyr:1L2SVU5mOrupl8v+hk2oSIyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719551417, "uuid": "96904aa8-cb6c-4626-9437-f249a4556c5e", "value": 622080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551417, "uuid": "e0849b9c-e8e2-4dea-a06e-31663cc3d212", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ac498f0-350c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719551372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551372, "uuid": "b4a55bf7-0021-4bc1-9d99-11181d432fa2", "comment": "Malware payload", "value": "da783f44db756dda8c73b7b4aec5a349", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551372, "uuid": "ef4dee13-0486-470a-966b-8c30a951c6c8", "comment": "Malware payload", "value": "47302d7b6cff1aacd72df561fdcc52295a0ff0ba007a7d8ae4feb2558a5b5835", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551372, "uuid": "9bb59ac4-4d71-4277-9fb6-73832a6fc54b", "value": "T1A7B5334129A778E1E5B8607314A69E112558EDB0FDC271764E46F2FFB8B32E3E8711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551372, "uuid": "1308da2e-a11d-4b5b-8480-323917025603", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551372, "uuid": "7971eb9c-805f-493c-bb15-8f78c92b5b73", "value": "49152:lDJCzOz5jSfnOMCmJCYQo3IbachbfeFwNnSN+2mMSl6:lszOdGfOMCsbN3qaKfQAY+2mMSl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719551372, "uuid": "3e55a1fb-1bfb-4fc7-a302-46a7d9a8b401", "value": 2407424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551372, "uuid": "ca1b3ecb-c528-4dc9-b293-23722412f571", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d43d52f-3512-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719553926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553926, "uuid": "0f6d3b8c-f13e-4340-bb64-772c2dec0346", "comment": "Malware payload", "value": "07b896ab2bfbc362b243002a3502471e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553926, "uuid": "221e13db-00c2-4243-8d4b-68b47aa7d11e", "comment": "Malware payload", "value": "4335ca8de7d9d59c0b2f24e633e1df5939cbd1d4e3e81cfe3a5252bdeee4c684", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553926, "uuid": "80deb856-8527-477d-b292-f7967cc05fab", "value": "T1AE953324BF773A28C54F087F6682FB6633F995D608027AE643ED361B561774E05238", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553926, "uuid": "34f2b341-6ed5-408e-802e-2fd948ff02a5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553926, "uuid": "f459bba1-62c9-4e4f-99d0-7abebe68f46b", "value": "49152:JFhOys9d/Mk8+oQAr5uphS2polrxqrsZ+rEl/:38ys9d/2HoIj3VYrE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719553926, "uuid": "44b626f8-ab68-4d5a-8d6d-babf4567cae8", "value": 1916928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553926, "uuid": "49cb38f8-a369-46e8-b5c8-e795d1c9f57a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66fb4a5e-3514-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719554721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554721, "uuid": "1be01a47-0e12-43c4-9f73-4d638bf344dc", "comment": "Malware payload", "value": "c01df64a3beafe185ac03219483adc67", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554721, "uuid": "4aae74c0-3cc1-4859-b450-7be2f0123674", "comment": "Malware payload", "value": "1fa327fc4aa1e9f3f9f1f7d4c821a065d809f75a320fc0e95abfa3247ad128b5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554721, "uuid": "3a1a5dac-f75d-4b39-bd8d-2654704f2a4d", "value": "T198B533436622DA2BCBE86330D43FDF07867AA931CAD2BF380778D11DD47776296568", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554721, "uuid": "1d04af96-1c27-4f46-a154-5fae980a2bdf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554721, "uuid": "95962d92-c4d1-4553-98bd-53376fecf1d9", "value": "49152:bUfzI64t3g650L57qnm/NqCRLOTQCxm00zScRddg0zomkh7Fdzr/5UurVBLk9:QrOt3SWmsC1OMkm0eSadg0zrG/fr3k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719554721, "uuid": "4d21e896-eb95-4858-ab44-97596610b5f7", "value": 2342400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554721, "uuid": "c6a3880d-528d-4358-a68a-5054120d5c17", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d9abb6b-3514-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719554759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554759, "uuid": "b1999912-933a-4176-979a-9c36e324fd13", "comment": "Malware payload", "value": "8846bc5657a5ef243c887d8682ff388e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554759, "uuid": "c3e30cfb-f866-4c4b-95b7-89aa07066055", "comment": "Malware payload", "value": "797fd94336eb37a09ebed5783da317e049dcd37369903f96ba3b67a9f3ba8c91", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554759, "uuid": "c315da09-6be0-4ca3-9350-cdf4ccc50087", "value": "T1D2159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554759, "uuid": "aec81868-875e-4a68-ac86-e4025f8cb5a8", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554759, "uuid": "a6ad2d11-f800-42fd-86bb-9ac5cd779030", "value": "12288:cqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tn:cqDEvCTbMWu7rQYlBQcBiT6rprG8aAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719554759, "uuid": "599817b4-79aa-4bd3-aee1-5e12ffe27cfb", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554759, "uuid": "be2d7bf6-0a93-4144-9a1a-c935d6e36c29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6576f83e-3515-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719555148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555148, "uuid": "b3cf1789-ade4-416c-86b4-74453de60cf4", "comment": "Malware payload", "value": "236d7ec770fb2545a177d1d3c0542cf2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555148, "uuid": "dd20e22a-00bf-4a01-bc09-aecfa1af444d", "comment": "Malware payload", "value": "f4a56259912aacacf59c7cbd21076e8e7cd8b17b9149174e25e2aab21089ceee", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719555148, "uuid": "a0f1be6e-d9a9-4a55-940a-b255c903a4be", "value": "T187743943F5F1B815E2B64B305FB996DC3B3F78B26C31436A51182E1A5B792A0E9433", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719555148, "uuid": "d73a2db4-f3e0-4baa-923d-ded70b382dc6", "value": "9ab579f0940038199ed136d401eb2211", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719555148, "uuid": "81a69dd5-4f38-4639-8eb3-5b5bbb07b002", "value": "3072:wzy1L4Mvb4+YlP+fvBmpyONgdSfk9fbm2Ok3IyBVngpN5h1+ZtQXGaMNXvH/ddk5:jL4MzN5BmoCyXWk4WVS2ZtQgXvarj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719555148, "uuid": "3d1ae7d2-4f69-4259-a415-bd79119053dd", "value": 340992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719555148, "uuid": "a00a6903-d42c-4a91-9345-271e8ae1e6d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31d8737d-3518-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719556350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556350, "uuid": "15d7a9cd-9366-4100-ae40-cd44f85fe658", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "c2784e2e6dc25d67f26371f296647a6c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556350, "uuid": "11d56dba-85df-4c6d-abad-1c0c181af7e9", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "f2d45289d448a90e276b1891e6f5032dc1f4625a6f262e9b0b776a474af11545", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719556350, "uuid": "45e79277-23d1-4caa-b0ea-8e8aec17c11b", "value": "T1DAD4BE5265F1BA15F2B78B305F3DA6DC7B2F78E32C60835A51041E1A1B762A0FA537", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719556350, "uuid": "c2266dd1-93fe-4732-9b71-b741772c8596", "value": "9ab579f0940038199ed136d401eb2211", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719556350, "uuid": "ea976f0a-4a9d-46d3-beb2-93e872ce5ab0", "value": "12288:AMuj4HlbxdAjXyOJw5VPL9YTQUR/C1Yk4LTvaRX9TwjRH2sZtEXyr:F5HloLyOJ81LyTQUBcYjQit2sSyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719556350, "uuid": "1c1a80f1-d3cd-4694-9f31-5d6b040d69f8", "value": 623104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719556350, "uuid": "f437a226-124c-49d4-93b7-2bb233f34c96", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c4d82d8-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557226, "uuid": "4b159efc-98c3-428e-9b6f-e0bd7ec4b6f2", "comment": "Malware payload (Mirai)", "value": "c3fa1105ee15db7e5f619f94eb77709e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#feb320", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557226, "uuid": "c572153d-b957-4d6a-9fe7-0f1abf69eb01", "comment": "Malware payload (Mirai)", "value": "4240baba70c3f7750d3d5f7fb91722b6821c86ce1c10a80714ab3a40d32f8757", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#feb320", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "80064da6-3485-4be2-b822-035b1912b891", "value": "T1FF733CCAF401DD7EF84AE67A4C524E1CB971A3D116870F6657E7FEA7AD31049380AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "d89e357a-b23b-4fff-92f6-405de2bfc1e1", "value": "1536:47JW7PcBYGinkgCZtQeuacWjcW0JcWcBKsiBmWfhXd8yMbGNL3:iWjQYP6tQeuacWjcW0JcWcBfiBmimy13", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557226, "uuid": "45d969a5-6150-4230-acd4-b9b117c00332", "value": 77488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "340169fe-7bbd-492d-bc7e-5fa46691de14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c526165-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557226, "uuid": "00c0551d-fd56-41e7-b288-27c9d055088b", "comment": "Malware payload (Mirai)", "value": "e26a4e7e395b52dc9a41985e6aeb0e54", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557226, "uuid": "7b717ea2-98fd-4873-8362-99416c8c25a0", "comment": "Malware payload (Mirai)", "value": "8728ee353cc388b25bad8178c41d54e87315191d2e2a21fc78a63f57b3aa6863", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "0ffba04d-b341-4a9c-aca6-a8c0fda99191", "value": "T1A1633995B8819B66C1D513BBF62D02CD373463E8A3DE32139E216F5137C682B1D3BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "3df6a95e-bb80-40d2-9144-ebb3dca5ea00", "value": "1536:1WtO6lzmnRR8lSRuRibPuNjyG7idZwWGKF2rnnfyJa10H:Qc6ldlHFylXlRF2rnnq4i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557226, "uuid": "0115029c-1e1b-4478-89aa-e49e054e37dd", "value": 72108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "aac92b65-9ae9-4b10-857f-e5c41768fbd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557226, "uuid": "17557e0f-7cec-47bf-aa2c-764d2d84ffd2", "value": "t152f0052a5f48575c53d085c4113e8029c09932d8b31736d8fead2b9f5737c8130958", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c8cab06-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "99400a16-336e-4fc0-9ec3-3f4271522e5e", "comment": "Malware payload (Mirai)", "value": "d45ba5b2a777465ccdca8ae7b3cd5ad2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "dc48f820-9b69-4776-ac30-1e6bdd482c09", "comment": "Malware payload (Mirai)", "value": "4b2992a9bb017e1e032d7e0a0a6d605a63196a3702eff0631389e62a6ec11169", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "4f4f3bbc-4528-45e3-86a7-55616c52d867", "value": "T162934A5273684B67C0970AB01DEF17F04BB6ECD226F17605651E7F910A32FB62489F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "6e307535-fb6f-452e-9a56-cab186160806", "value": "1536:Qr3+6sX2+wKXt4X1CylDVzVPQWSVLCQumZpa106l6m7dcTuZ3:QrujqhX1CGVzVPubfYH6mBc6Z3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557227, "uuid": "3a99deae-9e48-44e9-84c5-42e904e66f73", "value": 95169, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "f1565605-650b-48b8-927d-09786227c15f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "1e5651b0-3cc9-4900-8984-9063e727d071", "value": "t12221fcf1572aa2195955cfec8add33a911289306228aef33ee3580fc601a09de539c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c9201f2-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "36e7779b-66c8-4542-9d71-fd0a0c63403c", "comment": "Malware payload (Mirai)", "value": "fd46728cd74571877a927eb2720d7592", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "27fc291a-dd0e-4b2a-9a0d-74bd0d0acecc", "comment": "Malware payload (Mirai)", "value": "501d1138902ffaba9d27cd30c8f48b41656b375b2d4f945637f09c8a1c4fdd73", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "665bfdf3-11bc-4c48-8c41-c5ed7d658987", "value": "T192C3E91ABF158FBCF29AC63147FB8E25565527D22BD2C141E16CDB102E2138D6C4FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "6a071849-fcef-4e19-bdeb-308ced300589", "value": "1536:EvyhwWBhMjCK13U9PJ8jt6K1CjJ7kw1HyB+SrQvJa10Q0UOomofnLAS:cy2ohMjCD906KoJFHpCQv4lXjmgnLAS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557227, "uuid": "33a68c6c-55a7-4d88-bf61-7f6df0d856af", "value": 118922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "4b343cd0-cfa8-47d3-9c2c-637c73deb525", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "7d5d3dbf-4bed-4608-8e79-b5ddb8ab9bd1", "value": "t1f121eef1572aa2195955cfec8add73b911289206234bef33ee3580fc641a09de539c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cae2cd6-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "20fde1f8-091a-495f-a824-9214ca64bee6", "comment": "Malware payload (Mirai)", "value": "5a9305833099283dffcb99d1c419ec66", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "69bd24b8-9a81-4ce3-bd9e-432115e6f6e6", "comment": "Malware payload (Mirai)", "value": "4bb0769838c2fc1b460528e98cf239e98b73629859ed50ac67b1bc9c13daf408", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "8b2af492-ee43-4fe5-a6ae-6a61a195925b", "value": "T12ED34C46FB418F13C0D51779B6EF42453322A795A3DB73069A285FB43F8669F0E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "83f6f32f-5813-43bb-b355-1e18e39fb361", "value": "3072:BxioDMQI5nrNaO4nt3qZg2IWu6b4MX7LkDM/94PmPw/t93:DioDtI5ront3qZgPWjHX74DM/9YmPw/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557227, "uuid": "3e7d55c5-ba3e-4623-b6d4-0f1cee6c7376", "value": 135877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "95d2564c-f03c-4d12-b2b7-1669c8e44c1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557227, "uuid": "870a984a-295d-4850-8c51-fa8e713a6c7d", "value": "t1fd21cef1572a92195955cfdcc9dd73b912289206238aef33ee3580fc641a09de539c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fcbd8df-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557286, "uuid": "7e309b5a-b612-4705-a7f1-96ee09a9269f", "comment": "Malware payload (Mirai)", "value": "99ad9c4f9625d0857bd35f725db8b74a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557286, "uuid": "7c74a7a9-cc4c-4734-b063-cd566384fbe8", "comment": "Malware payload (Mirai)", "value": "2d53ee7dfe4091efe352a54f81a2dd3c0cda24f188f099f58275b63d3bfd5866", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "1548b622-f476-4411-8d27-72ee7b46d934", "value": "T143A35D7273391B23C0E1A53940EB9B3AB3F65FC92A60820B7E611E987F156E035477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "cdefaeb4-5ace-40ab-bd59-64d971800825", "value": "1536:HYEBKwP9WxeE+HGkytWwYBNv5MJDZCqv8b3IfiV03lMvmpFDtzv3:5FP4FtYBteJZ8b3NyOvmpR9v3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557286, "uuid": "78e26d75-a5fc-4088-8d4b-b99f5081fe05", "value": 104964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "44ba0a76-9988-48ca-bb89-d387dda99e1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "8b3cba71-06b5-4f12-be68-1d961b40873c", "value": "t16021f1f0532aa2195955cfdc89dd77b9112c9206234aef33ee3580fc641a09de539c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fcd3874-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557286, "uuid": "834b1c4d-32e4-47f0-9935-630b38197878", "comment": "Malware payload (Mirai)", "value": "641e66df48be9cacb27136df4456a78d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557286, "uuid": "1553aa5a-0b0e-470a-bd02-6cf2faca0a51", "comment": "Malware payload (Mirai)", "value": "1416e5d091ea9fd4cb24c772703248d732f9ca6b758d1f2183601cd9cd03e9aa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "e9d24d1d-bcde-40d0-80f1-5d0d6c4b7e1d", "value": "T1C5C32B06BB711FB7C89BCE3605EB0721058DD95723927B2A7238DD5CBA4B28E19D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "602a4970-cea7-4ce2-91e0-03712bd4fc09", "value": "3072:mEJdVoDme57eWOxZWKVoqIN51Mu0O74TUSmgnLAS:no1OmKVoqu5oO7qTmgnLAS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557286, "uuid": "56dcad0d-c50a-4bed-9e48-019544c880a9", "value": 123018, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "28b91afe-02d1-4be6-8751-e7fdfbefc88c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557286, "uuid": "c1f1874d-3c38-4c68-97f3-67bd2deff661", "value": "t1f121eef1572aa2195955cfec8add73b911289206234bef33ee3580fc641a09de539c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeab9a3a-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719557418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557418, "uuid": "07ab32cd-254e-44f7-b277-c42aac48859f", "comment": "Malware payload", "value": "fc5857b45516cd1decae5dbd68d59924", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557418, "uuid": "f639ddd5-c624-44c2-b767-24cd8ae2db20", "comment": "Malware payload", "value": "09dd0de52154c82e85335ebbaae98e4d8d750d826171da9c7bea2ba9033c4551", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "f31c4662-b0b8-4b21-8d84-4e8a0cf41ec4", "value": "T17B647D82B69280F3D12F16322168D97B5E3CB93147A1CADBD7D05CBE9F317819630E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "cb192f3c-7dd8-4020-9c16-e17ed1b97d06", "value": "92dd8a57c388fde2670d2599076670d6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "05562e1d-6a3a-4014-acee-078922d83ed2", "value": "6144:zaU22ravSWBqQK62sZ4XDPwtLKtr616/Z8xUgK:zaR2raq0p5Z4XziGD/W2gK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557418, "uuid": "30a4e0d7-d325-4497-a03e-55f257becced", "value": 330240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557418, "uuid": "954e90ab-7208-4698-881d-5f676740664a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afdf8a19-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1719557420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557420, "uuid": "fbdd3623-139e-41d7-bb7d-fc01a3ff9a42", "comment": "Malware payload (Gh0stRAT)", "value": "c3f5cff199aea3924efbd5b07e5e018c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557420, "uuid": "9e32a970-49d3-4f85-a3b9-d7862ba37788", "comment": "Malware payload (Gh0stRAT)", "value": "d3af6e62ef3ce968da90beb9be44b04948b996c3dda893ba425a1147eb7696ad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557420, "uuid": "118e9c04-b1eb-4ed0-a2fc-f48bc791eba6", "value": "T1B965AE591BA74266DB557779C8A6A6A419190F431F28C0B21E304E1EBD2334FFC23E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557420, "uuid": "0bf59961-e1d6-43a6-9722-20b300d800ea", "value": "323f9a588df3d5a4732f7632ec223efe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557420, "uuid": "cdf9dd72-c61b-4a31-8bde-bb7cd3a47709", "value": "24576:F39WaOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:598HPkVOBTK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557420, "uuid": "dcdbbfee-464a-4dda-8f65-dfc277f10645", "value": 1507328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557420, "uuid": "9642eb31-34ac-46e6-9fee-2527b90e29f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b041ec70-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mimikatz)", "timestamp": 1719557421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557421, "uuid": "ff080304-b53d-4378-a452-c9192bcb262d", "comment": "Malware payload (Mimikatz)", "value": "4561eb95d72284693c4640f299f9a649", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557421, "uuid": "48ca1424-0e6b-4326-a31c-4688394d1d14", "comment": "Malware payload (Mimikatz)", "value": "3ac75c33e947a904f798ee3dbaec39a3a092bdc5a8c29d7ac0ce77951541f9b0", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557421, "uuid": "6665b032-f993-40f7-bde0-8b2d261b2aed", "value": "T1AB75BF581B974266DB693779C8B5A29009190F532F68C4B55E300D2EBE2724FFC23E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557421, "uuid": "86bec2b7-39a4-42f6-a6dd-aa4c93c56644", "value": "6f30c699c45e14f2bf5c59802416fc56", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557421, "uuid": "b6692b3d-4e5f-40cf-a972-57778c80686f", "value": "24576:/CT1uEiSqHQH5pGJd1GdQmw7dj6ypuNiTdjvPGy3:/ClqHQZ+1GnAj4ipjnl3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557421, "uuid": "d8794c32-c4f4-462c-9c44-eac322b6b423", "value": 1590784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557421, "uuid": "8b747205-bd73-4aca-9ba0-a95034a5fd7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0a537a5-351a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PrivateLoader)", "timestamp": 1719557422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557422, "uuid": "cfc1cccc-874e-44c3-b44c-25f9a119040c", "comment": "Malware payload (PrivateLoader)", "value": "d25bee31c30313658d2e010c0fb5f66e", "object_relation": "md5", "Tag": [ { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557422, "uuid": "772b419e-7c9e-461e-bfb9-9f7cc0380b71", "comment": "Malware payload (PrivateLoader)", "value": "d963acee9e469ee9b95e16ca8d4f77412663b6f92928d885cd35c82595bea7ef", "object_relation": "sha256", "Tag": [ { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557422, "uuid": "a1c9b10c-45e7-4a8a-b93a-5799bbc13c07", "value": "T1A92622C57882D5F8D01ACBB0C422A2FD36AD3FF6D9364C9B3A847E167DB36201D665", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557422, "uuid": "3d68e785-4866-45a0-b514-49b5170fd1ce", "value": "448b6888b26145ced7ce018aab459303", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557422, "uuid": "d5d7a7bf-557d-437d-9de8-a690f108a3e9", "value": "98304:dbFhmDz7Avv/xXkMfPikM5JofdF7r8tH9gAMhPQLv+Wu5Vm:dFAnE55fb46LSH9gAMBQTRM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557422, "uuid": "62706357-722c-4c13-afca-989e0a030483", "value": 4487168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557422, "uuid": "ea368db5-b832-4555-ba16-1be8794203b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1233b5df-351b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719557585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "913103f3-de21-4817-baa7-d8434ec58215", "comment": "Malware payload", "value": "8772d579df393c1bd2254dbad27ea530", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "4c0b6ecf-1a9b-4d1b-b9c0-94016cd3c77c", "comment": "Malware payload", "value": "2a095bf23a04e858224fee4d5744cda9da1054d7ffff0c7fd3e5f33ed0bd1255", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "8cf88c33-4839-48bd-96b1-e78a254edb20", "value": "T15BD34C46FB418B13C0D51779B6AF424533229795A3DB73069A285FF43F86B9F0E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "55fcd4b3-4803-4bf7-bfc2-3dae3c60b7b2", "value": "3072:BxioDMQI5nrNaO4nt3qZg2IWu6b4MXz8DqxV4PmPw/t93:DioDtI5ront3qZgPWjHXz8DqxVYmPw/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557585, "uuid": "d64db71c-852a-4f2b-b3a0-1c015c802d35", "value": 135877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "80ab6346-8398-4aef-9960-4d9b71bc9aac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "d7f6123f-6d02-4c0d-876a-0f99353ffbbe", "value": "t1fd21cef1572a92195955cfdcc9dd73b912289206238aef33ee3580fc641a09de539c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "124c4f8b-351b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719557585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "ff49be26-0afe-44e0-b193-8449ff27aa72", "comment": "Malware payload (Mirai)", "value": "c7863d73c8fa62a7f01e5fdf35209747", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "334daf9b-a449-4591-889a-9fcf83ac1dee", "comment": "Malware payload (Mirai)", "value": "bc0b6bf0e14dc3b2d0b04444b438d53e2291465c65505c51421783dace6ace93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "25887680-6b82-41a3-ad8a-e803ae0c738f", "value": "T1B7833B07B94180FDC08AC174076EB93EEA33B5FD2369B25A2BD4FB23795AC214E19D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "66bc9b92-033a-44a5-af54-21849658b6b3", "value": "1536:JO/H/2UHlhoH30ej0Eg86qSgPoqpseEQ/GwXKMZdY9TAwoLLWYJLU:JO/H/2UHlhoH30ej0EgwSYoqprEKGwar", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719557585, "uuid": "9cf46b26-f88a-49bc-bba3-031a200f5da2", "value": 87552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "5b2f6e6b-8030-4535-a0ba-f88dcca9a24e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557585, "uuid": "d55f2cf3-88d3-4530-a710-e349addbf732", "value": "t17521c2a5b4aa1850a1ffeb717352f15108602f6414e136e1cd7744f6cba33c25db14", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10ff67e9-351c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PoseidonStealer)", "timestamp": 1719558013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558013, "uuid": "89697175-bf35-4b65-aee7-27f69b3b4bf2", "comment": "Malware payload (PoseidonStealer)", "value": "bb8911f632a4547802a8dbb40268e1bd", "object_relation": "md5", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558013, "uuid": "9879a7ad-cbe8-4b0e-a9c0-54fcdcee330c", "comment": "Malware payload (PoseidonStealer)", "value": "474ee78c6636ee478ea7f4521559679fbc468bb326357737bfc465e63ed153fa", "object_relation": "sha256", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558013, "uuid": "6cc62eb0-0d47-4390-8639-626d12f3b472", "value": "T177F302B62D9DAC64CD8665B847B010274CCF3EEB5A710579ADE3DC2824E270137EA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558013, "uuid": "507a797b-bd48-46c3-96ef-ca239ba1565c", "value": "3072:mHeHScq3ZoyUw44m8EhRTgvk1qAfVdrl12expIJTy48e2m:mP3Z7UH4pE/TgvkgC/i/1y4j2m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558013, "uuid": "f90b853b-5c9b-4a2e-bb4e-b0b1625059e9", "value": 171970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558013, "uuid": "153fb31c-2d60-4193-9676-2f32d89948ee", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e921443-351c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558089, "uuid": "0e381613-473b-4d0c-ad8b-c3a19144f8da", "comment": "Malware payload", "value": "31308bd2be76e6a6fa622d8330d9fb8c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558089, "uuid": "5236ea14-29ed-4c2b-90bb-d21216ebfbd7", "comment": "Malware payload", "value": "ebe03818d421729e409e92d2e280807d1ddffe649c26acab0c6df111fc4b6aad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558089, "uuid": "68a26175-5fc2-44c9-af24-5958a9b3cf97", "value": "T18E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558089, "uuid": "60d33f1b-38e9-43ae-af0b-e308848e06a4", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558089, "uuid": "482ade2e-f20b-459b-b905-cbfdcde2cb3e", "value": "12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T/:MqDEvCTbMWu7rQYlBQcBiT6rprG8aA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558089, "uuid": "2fec630d-5211-4c94-8a3c-5364a3355c5c", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558089, "uuid": "7931bc52-9768-4bec-b76f-90bedf51e61e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c124067f-351c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558308, "uuid": "9d7696e3-9ff9-4e99-ae75-82205174dc67", "comment": "Malware payload", "value": "ff247e0d8e947005ccbbe7371c2df707", "object_relation": "md5", "Tag": [ { "name": "connected to meduza stealer", "colour": "#d8708d", "exportable": true, "hide_tag": false }, { "name": "cve-2017-0199", "colour": "#8fbfdc", "exportable": true, "hide_tag": false }, { "name": "exploit", "colour": "#78a9b4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558308, "uuid": "f99d47e3-d311-4cfc-872f-452f5e3b38c4", "comment": "Malware payload", "value": "ac1da93779e03937f56a4a2d5d9390c1096da6740891f67b5ffec312e835747f", "object_relation": "sha256", "Tag": [ { "name": "connected to meduza stealer", "colour": "#d8708d", "exportable": true, "hide_tag": false }, { "name": "cve-2017-0199", "colour": "#8fbfdc", "exportable": true, "hide_tag": false }, { "name": "exploit", "colour": "#78a9b4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558308, "uuid": "624b4e33-3272-4e44-92c1-8a25d137190b", "value": "T118A31653D203F479E75359FBEA7CAF9103D19E8ADE8C954F00AE44499BD0ACBB20C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558308, "uuid": "9e635193-078f-4d85-a8ce-46c5cc943ff5", "value": "768:tZ6A3yXNA0AGAgd4UehMU7/+BhkDgKAW04AQiXAZO:tv8zO+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558308, "uuid": "93228b74-f50f-4c1c-a6b7-dc6bf94a017e", "value": 104677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558308, "uuid": "fefc9dc4-bd3d-4407-ab62-f653d570a8ce", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eecec5a3-351c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558385, "uuid": "c38e51a7-dbb5-43e1-8a1b-3cda5e606ca6", "comment": "Malware payload", "value": "e0fd7398afa6387be99fcafdb5ebc572", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558385, "uuid": "ef2f11b9-a7db-4b65-aa36-ed37f40e7049", "comment": "Malware payload", "value": "2bbc55d118d6ac7a2bda5c919bffb67ca21617b4069a4a1c94dabd1f1135d8b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558385, "uuid": "7786abf1-aa7f-48a9-823a-dca3ff7192c0", "value": "T1BAB53338914184F6C6FA6B73F8578C802E317EF3419667B66466F49ABD217133212E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558385, "uuid": "fa0f5c90-472f-4fa0-acc6-515e12a767cd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558385, "uuid": "83937dff-2cd5-482e-b1b0-944e80abe0cd", "value": "49152:Pd8v+0GJ6k5zuNBy3wsRBarQxHGYTVUobjFqF/p6M6h:POgNw24rQxTop6Nh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558385, "uuid": "75e4a386-75e2-4b3f-bfcc-6dd5fdf70f5a", "value": 2395136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558385, "uuid": "264136e9-a47f-468d-9b81-a08f9ae0ce0c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a632bd0-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1719558458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558458, "uuid": "eff88ce3-861c-4816-a5e5-f0eb5e5a3370", "comment": "Malware payload (Socks5Systemz)", "value": "696b50addc5af70d96b83765bc199874", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558458, "uuid": "a4295ac2-cac9-4a87-9aa1-4a5d48db1555", "comment": "Malware payload (Socks5Systemz)", "value": "194a76e0daa72422465be0b19a6dd9190e19aac8275f1fb5b5f9a11c127c1bd4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558458, "uuid": "c89c9b51-8ac1-407e-92fd-bcde828284d6", "value": "T14746334305976974D276EDB160AC824D2B7BBEA7AC30320D3C9C0D8D9F2676A5D533", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558458, "uuid": "fb853f6f-e80a-4198-9d73-d2cf4375e28a", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558458, "uuid": "37a7c004-325a-401f-8690-5912b68498db", "value": "98304:CaZ/cXIn+BGPoTn+U4Ll3VHmWSw8S0RiuA0Xgg/rrWTjm7NZEcERwzFrAyZFwF7N:PZU++BB4p5cwLfuA0/rrroXwzFrHZedN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558458, "uuid": "400307a2-66f7-4144-817c-ad31bc1e045b", "value": 5807667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558458, "uuid": "03652315-5e85-43d3-8c57-b9e92a7bc75b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bda65c1f-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "f1fd721e-4460-4bef-996c-0aca6a7d60bd", "comment": "Malware payload", "value": "070510b21ac27dd9ad5bb78301accddd", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "19480075-b2de-4772-8e4d-531485d990dc", "comment": "Malware payload", "value": "691ec78607d30542cf2487bfc1a54078ffd322554ee4c34e70795bcb845bc546", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "68eac244-763f-41a1-a653-e74e69c6df3d", "value": "T193E53347784F9CF73D6A915CA64AFDC8A22C0A1B45EE0A58259E5C333D19EDA0DCEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "c5b9a294-52b8-45f7-9d5d-0e2c5df116e8", "value": "49152:fmhi5vUZu4Qk+O8nD2snuSmz053bxnlL7T+hn2d1oEZru+SwJ8KMY0CqxPWxtMQV:f2i5EuBkY2snxm2LdJvdqr+8K11PMQV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "f6eeba11-d9a7-42b7-8006-349c5a57b364", "value": 3030024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "a63ac437-fa96-41c1-84df-55418ecc9496", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb8f078-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "4aaec990-8b7d-49c0-b250-7993fbc34056", "comment": "Malware payload", "value": "9c38a5e023c8e9af81c85a2dbdf3c57b", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "066397f2-57f5-4437-a9fa-ecc292832d88", "comment": "Malware payload", "value": "000cc52a6ce1874e6cb61f97db94f797843713dedb8bc16f6275cbad7f7d3c77", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "70eed65c-d538-4042-b833-e9726ba3c443", "value": "T1F0E533C5F80AB06057857CAEA6FBDF5EFFC72E31EC25436282576325F016808A957E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "a6534373-774d-425e-b078-d67b86991d64", "value": "49152:jbO0lAjvhavGkOlq4iNSdaMXDJ+vjx/zr0YGSxoMx9CMxq4JzznhBOrwH+Azq:jbj8mJ6Z9mjtzoYTLqIbhBOMHFzq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "4377f2df-49de-41f0-99fd-ca6452a47599", "value": 3040776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "bc713e35-9c1f-438a-9b98-871cdc744876", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb9f5f5-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "7c011803-d812-4836-861c-c51a288752ac", "comment": "Malware payload", "value": "107d5ce35b9c09fc2a210308a3320240", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "15878c89-3d43-4bf3-9981-438a27df648e", "comment": "Malware payload", "value": "133e25388f94cdf267efe7efec7c0e367c30dd8c8e162e081f938b1fdaa3cec7", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "6dee6389-1629-4d32-91f7-8929f490c767", "value": "T172E533AFA950650DA233FDC803E9EFE362940AD3EB956D34609F961E52738737B520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "f7d0d368-cff6-4ab9-ab5b-4efeeb00fe6d", "value": "49152:xyu4A9P1TZjp+czsOlpGeTq3Ro4E1dRYwqgf/pTlwBzfRxiI3O:xya19bIuTqu1TciRTlwBzfrPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "6ff13f59-3419-49a7-88a7-53ad6e7d28ff", "value": 3036680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "08f18c95-2a1f-4802-a7cb-002ee4b5c537", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc14bba-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "db43f77a-5f64-479a-95a1-152a8ad58b39", "comment": "Malware payload", "value": "e40c107a0254497e17762a37e56711b0", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "5aa80f1b-8785-4f0b-b195-8a4c2180cc7b", "comment": "Malware payload", "value": "c894408f43644e7a765d954270e3168ca1210cad0b3c643777de6b5059b0802a", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "d454ffd5-8d54-46b4-bb35-b095e225257a", "value": "T140E533A60072A74EF907CE8A7C0F10144DD289B815EDDB9DED99BDCD69B7C2EA5070", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "d93b2783-dcfb-4c12-9fb6-c739211a3ce8", "value": "49152:jthpDCZLF51Mn2B70cv55Kr/mw0VfkHDccfB5mDKWOC7SH/MfQhvF:jDpEf1MQR54r/5DcM6fjTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "4531b7c8-e7f8-435e-a8ce-39258ab5890d", "value": 3036680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "d15775b3-8898-4296-a865-e4f8b9b4677c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc22004-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "67777fa2-74a6-46a0-973f-8d219af0a521", "comment": "Malware payload", "value": "bcec0d151b78baa40f7e7980005236db", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "e5373646-cc33-4f01-93f3-a31bc16c7e83", "comment": "Malware payload", "value": "e419bd05041b98caa5578f8884b5d8802abdf5111b986772cd0a9b224179c8ca", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "c94792ef-5199-4daa-a0fb-9d5f2f7662df", "value": "T1ECE533B6D6551E906B95860E023842A810F10CFF664757FB2D54CB2EFC829C7D1BAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "1df0f00c-23df-4556-af04-f66f23389e80", "value": "49152:I3SYQ2ne6711hr5dG5dpt8rGK6ASJU8hZFaa35lVhQ+AHhIO+4g33QLSg6Q1+kzB:I3SgRr5dgtgWJDb5XhQFhI14s32kQcO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "51be3359-c85c-4f9a-acd0-083ee2a5bdfe", "value": 3035144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "72d64eea-a71e-4592-bfd2-92e83b491390", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc24f09-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "feec9f0d-8be9-4da2-a5ef-d25704f3e9b2", "comment": "Malware payload", "value": "3f5bdf3c1ad96b2d6a0affb81d68365d", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "5158ff65-afde-4a0f-84dd-9618f71d2927", "comment": "Malware payload", "value": "3a22cc873d9d9609353f2539fbcce2926f30ee3792b8ef48097c630ba7e1436d", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "1722e609-a400-485e-b217-fc5c80972737", "value": "T19DE5335EBFFB48CE4E03C2D151A0676D92443DE137EA8336345E38A458B1C96663FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "1389b938-84e2-4e44-a47f-d51bd63a911b", "value": "49152:Z2fNBJPXVYJZP0xre6eXvH+9bxHANT/pjmQepQ2A3ZhjWGyhuHsG4Ns0uJDT:Z21BJPXiZYqDvHq+NT050jnyhuHs6lJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "ac7636c8-6a05-4f63-9b15-c901b0e49622", "value": 3033608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "a634efec-e864-4059-be4d-635ca6c98f8b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc238e0-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "9d7ef024-7d9a-4fcb-909e-86aab2bb9590", "comment": "Malware payload", "value": "9720857e1e484e7e20f6af8b1090b03a", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "704d9484-d965-4846-8ccd-ddacdec54086", "comment": "Malware payload", "value": "506a86ef898efdd2cbe0cdf2487f8f8f3fec22dc9bfa2f04efc0d585a5a03c0a", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "8d95f416-7940-4186-9d6e-ca2e7ee85e7e", "value": "T1D2E5336E736E49BA1E40C40D15C35E6B4EB8DC1B1E8030392AEF7A562F9913523D66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "20bf83cf-0d8f-4256-a4b6-b8137ca43f44", "value": "49152:orfLsGZ89ekuY36vw35C8BXNTEDHfTyx4mXWoYjKXV2XErkaYsGQu5pqll7FerB:Off1cLXJS+42sKl2DsYLqFG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "a11ce1c8-1741-4f00-8794-fab541fd4c0c", "value": 3069448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "5068cafb-f356-471a-9708-5be2c59b9160", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdf8c03c-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "c1d94736-00a9-4d17-86ba-be788a7fc77c", "comment": "Malware payload", "value": "a7230bc1114665ac1cf71b958562bfec", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "b7cb5c18-9238-4fe0-8697-8936e9b9d140", "comment": "Malware payload", "value": "a00b7607823eb0ec97bd709eea94143d41fda30e32929504a42c9e2c44391e4c", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "f2ec4105-807c-4f06-93c4-1caa48d29d33", "value": "T164E5331DFDB918C2674EEB22B084E58DAE1EF785640A5ED14F13409B5BCB10BF9D22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "1bffeb7b-57ab-4066-9fc1-c6f0fa800f32", "value": "49152:q20fBt1QJNv5N5C7HP71fS/jYbAe//sZ8IqgQLO2BC1gaH2ZFmanJL0bl:Xw1QJNv5NErPUUAe//sZ85lLO2Q1gaHd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558732, "uuid": "007bb564-201b-4bcf-8978-9b1c0ec5f3c4", "value": 3073544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558732, "uuid": "be2e3b79-d5e2-46d8-a2df-56898485a583", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be889f27-351d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558733, "uuid": "bc9fee66-26ec-48bd-972f-4fd37493399d", "comment": "Malware payload", "value": "b8c853403b77d425d745219ffa36ada0", "object_relation": "md5", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558733, "uuid": "1c870c8b-feef-4c14-9214-78af6f3f0016", "comment": "Malware payload", "value": "781539e7ee59959875a3cf075fc109b3b4252728e60a38c88fcf914eb9d115b0", "object_relation": "sha256", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558733, "uuid": "d04ba863-573e-4616-aa0f-8e8d93a6779b", "value": "T18DE53331468166FA6F013D0249BEA718DA97B5EF801EF792C1F3905674EE7C816E9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558733, "uuid": "48a9ae30-3a73-483d-a815-dd25ea3622a7", "value": "49152:uAl7Hr1wgH5ZTyZLHz429+40hr7ps0Lsi6GXHlwkX1WP8m3hg8nIQGT3Vo:uAp13GZz429+40x6GXH+u2b3m8nIZy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558733, "uuid": "0968b694-377d-4ef1-bff9-e40bbc420b69", "value": 3037192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558733, "uuid": "4be4f351-8919-4280-810e-03dd0027c0c3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c4fb56e-351e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558918, "uuid": "6c3fcb63-ac18-40de-b453-f649fc6ff132", "comment": "Malware payload", "value": "628519cd5f97c84046672823989b5378", "object_relation": "md5", "Tag": [ { "name": "http-request-to-.dat_file", "colour": "#c21f20", "exportable": true, "hide_tag": false }, { "name": "trojan.msil", "colour": "#9b450e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558918, "uuid": "d68efe6c-cbaa-42c0-bba5-e0cf408d7357", "comment": "Malware payload", "value": "f1faa039dda9d47358a62a2d1c289cc6c12a990aca7f0071f1d48499f12c18a6", "object_relation": "sha256", "Tag": [ { "name": "http-request-to-.dat_file", "colour": "#c21f20", "exportable": true, "hide_tag": false }, { "name": "trojan.msil", "colour": "#9b450e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558918, "uuid": "8ede6d54-0686-471e-b2c2-4aaa328bede4", "value": "T178565CF4A19B85D1F8079DC06968BEC7063231B3CDD90C24272D79444FBB9A97A4AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558918, "uuid": "e70daf73-e138-47ce-8536-8c11a225ff0f", "value": "24576:hEIldeUjoKiycWWg0YlWOGsnfaq39xVu5LcUn1XEYq4u5vySDr0N7+lDFnEFb187:B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558918, "uuid": "7320847d-b947-46fc-a0bf-c9e594b1aff3", "value": 6072320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558918, "uuid": "c3a2e5ab-4f86-44af-9f50-8d23e3fef733", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49e9715f-351e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719558967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558967, "uuid": "4ad642e6-a121-47dd-abe5-74a7314e27fa", "comment": "Malware payload", "value": "c3e3fca6965eafd8d82b7eba79abf592", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558967, "uuid": "d9deab70-9691-4370-8721-b5a9733ed32c", "comment": "Malware payload", "value": "05bc25b30c2f440703622a0aabfd8384050053d0e8ccbe21a3b11ea40cf8dfa1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558967, "uuid": "755f3ab2-a82c-4888-947c-9d3f5e260b9f", "value": "T17E95332C74AA52BBCD4EA2B443E693CC73B06B202D575D76A221167902BF37A3D74C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558967, "uuid": "6cb551af-969a-4afd-ab7e-f416991fd655", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558967, "uuid": "cc533e77-6ec5-4b0e-b09d-21632237f137", "value": "24576:hWLi9/Ruxn9EqhYczTsdhennv/QDtUjGvROyf5JFTUW1dgokiUNXZiOXFPd7CDEf:hWOmxn9SksdYnH+ewIyfNnaQ0rqY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719558967, "uuid": "4388cfa6-fd9f-40b2-bb82-f9f8e7a70aa0", "value": 1914368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558967, "uuid": "05597c0b-3697-4c7e-ba14-2c81340b32de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddae0026-351e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719559215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559215, "uuid": "884e2f35-9b28-494c-a917-ec0f0cc870a7", "comment": "Malware payload", "value": "360e39eb39818bb0855a225fe5355109", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559215, "uuid": "7b15e9f9-3bfe-49ba-96c8-1a4aa2cc11f1", "comment": "Malware payload", "value": "caef2d7cf45b06cf775da101268564fa187930d88d954b11998962b0bb48c4ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559215, "uuid": "c8bb7856-16be-4369-8175-3234f174788a", "value": "T14A27332FC54E0DC9166F10AA73837EE9E2A721F9C847459393678E50933E3E16D0AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559215, "uuid": "9c408391-d923-4cb2-938a-48ac8d7bd808", "value": "393216:ZysO5QOS3dNrHsfXzOLaiGohKqjo84+z57eoTW81lSX8XG:lOmpXrMfXzUvhDs8f57eoDns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719559215, "uuid": "2e02309f-e315-4d51-9e90-4298558c62bd", "value": 22064100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559215, "uuid": "e9d49e05-8093-4005-996b-1727df473e50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719559215, "uuid": "b14020e6-4102-44e4-abad-5efc506dbd79", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58a01e71-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1719560710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560710, "uuid": "0a1aa319-a009-4e18-b92d-4fe182dd6a7b", "comment": "Malware payload (PureCrypter)", "value": "9dbd016ac3a1427c233dfec432999a23", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560710, "uuid": "dc1c3609-f2a2-4faf-8bae-96b23a5dc6ea", "comment": "Malware payload (PureCrypter)", "value": "97672a57399be5199e1848288159d4b36782525c1c1d0006e87fa17bb7675710", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560710, "uuid": "5ecc9534-a13a-4562-8557-45331bc40ba2", "value": "T1B893AD407B586AC6EC14CAB09C65EBDA0774CFC855A182A834F0FE7E7BC2A94C914F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560710, "uuid": "8c672f8f-c0d5-4bf7-a908-49f59d2e86b7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560710, "uuid": "32dc73ef-d437-4252-a6e6-000285bd0704", "value": "1536:tz4GZjzQwK5WW7VCn6KyNFAmu3wtBUniymYq07sZZSTxkOzwqaCLZ83ztM:ze5BV0KUniyc0BFu3ZM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560710, "uuid": "7f6cc358-aff8-4a59-a9e2-318d46a645c9", "value": 89128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560710, "uuid": "9a7ed958-cd71-42b7-aed3-8531fcf70f23", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "591da245-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560711, "uuid": "0b87282f-9714-44b4-a3a3-0bcbf16a900b", "comment": "Malware payload", "value": "c8b04088d80cd297677b79e4eaf49e1e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560711, "uuid": "498d8705-66ea-4e65-8a3e-db31313e1003", "comment": "Malware payload", "value": "2c31a7b41862438d532d41a7ae7c1a8df1ec449c87a54f1b20cc13f26af35578", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560711, "uuid": "2854b336-6e1c-4fc7-8219-70b104d5ae27", "value": "T109D533BF53B50294806787D2147B42A918F240CB8683DB8D14DE4FBB6977DABF00BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560711, "uuid": "a5658b6a-1653-4d9e-b11a-6092685a052c", "value": "49152:K05hwzj8JWu8dut9VLddLNKxXKt6yn5OB+0Hhm/dqnQimEMPb/yOtJFLiu1iAEeX:rS/8JWvdutbNGdhmWQZfzyKLZHNF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560711, "uuid": "4c6744f6-8256-4dc4-98bd-2ffacb8bfc48", "value": 2881544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560711, "uuid": "8cbe1ad3-c6aa-4097-a326-7fb86c0bd46c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dbbf9b2-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719560826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560826, "uuid": "a17805e9-fc95-4506-8363-7b3962314b28", "comment": "Malware payload (PureLogStealer)", "value": "a399caf039492543ea347a9834cf69e4", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560826, "uuid": "a6d8e676-070f-48b0-a9b9-4e854094f14d", "comment": "Malware payload (PureLogStealer)", "value": "cceaadb5aa4d335ca8ebd30919df8933bd7a493ffce6e298204859e1c0577114", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "adfaa458-af5f-4cae-bfeb-2fe887b786e6", "value": "T10FE1D5045BD8AB33D9B71B36ACB743911B75EA410C17DFAF2888210B1F227846E27B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "7f128c74-ea09-40d9-94cb-da34709c9134", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "28b26165-1ac4-4451-9210-ba1b8b4826f9", "value": "96:H0XREZc3RaEnmOPjtJ93YlCg/74Cyj2NslETkKIHcCJWMhzNt:6REGhakh7tJJC7D4C/NsDxbj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560826, "uuid": "1df0a4f0-4ef4-4243-9baa-6c379305cf92", "value": 7168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "4ca426a8-ce45-4103-bc26-d724e8c7757c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dd87a19-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719560826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560826, "uuid": "39e9d96c-de7e-460a-b20d-81b5cf355612", "comment": "Malware payload (PureLogStealer)", "value": "9e19604a83f3c09dadcd5510f3212da9", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560826, "uuid": "61c6cac5-8806-47b8-8071-addba6e8fcb5", "comment": "Malware payload (PureLogStealer)", "value": "695fc277fa19a48b68ba47d8973750ff8554febe10d15943f70be01d1debb997", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "7469a274-ca5e-4989-8ba9-fe5b62a40101", "value": "T195E1F9059BC89736E9770B3AD8B783621774FA426C43DB1F2C8865071F967809E627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "a80e873e-673c-4ae9-823a-e8ea5a4e624b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "3a70383a-def8-4793-96de-5f848180e299", "value": "96:TMVSH8c3RaEn5OAjtJ93Y8JZs4CFXNwsI/EG+bNp0wUeLzNt:aSfhakYgtJJzZs4CFXmsPGy6wUeN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560826, "uuid": "264821b1-b6b8-4826-b969-80bb3fea7f4b", "value": 7168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560826, "uuid": "06287715-15d6-49f7-af1d-3ec17c5af1f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e239912-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719560827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560827, "uuid": "fa6d93ce-dd50-4f42-ae94-2ecac70e316b", "comment": "Malware payload (PureLogStealer)", "value": "67225a04703e2187c8dbb903c59b086c", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560827, "uuid": "79faddbc-3cfc-429c-8129-e16772a56364", "comment": "Malware payload (PureLogStealer)", "value": "e8722bcfcb68c67f38cc84b8b1ffbbd15b42994f1c6916856828241afb3d4a63", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "dc3fff2c-5494-44b8-a8fd-b3921b614eb8", "value": "T123923B230B940792C19149B0A4FAC2D6AF31BF41AB67C27F34DD7C675CA63E02A15B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "80df63b1-ef8f-485a-9530-ac2525c955d3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "5d3b7323-1073-47c6-bb48-1b8f23fc1608", "value": "192:9DvOKDXB4UWIs0zkZN6atAbvR4rsdbha3JIS6j2naSCCfWwZ0VfHix8uyMrj1s3A:5v3WIs0zkZUjjaQZhhifBCCx2MM8hLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560827, "uuid": "7a400c4e-fa7f-42ee-ae4a-54800b0f0a4c", "value": 20064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "1e200ba9-fba3-4d32-a386-448c286e7f51", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e793b9e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1719560827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560827, "uuid": "a4dc0d1a-5654-404c-ac4d-18b51227d67a", "comment": "Malware payload (PureCrypter)", "value": "fe1f62b157528b9550fe5e0b011b4f41", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560827, "uuid": "2db80e53-744b-4f4f-ba61-f069e6108162", "comment": "Malware payload (PureCrypter)", "value": "ec661f1e7ced904172ce94f8f396baaa3b951cb0639e1c598b0c0788bf41caf9", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "6a59344c-7138-4813-b061-e4bb7c0c5df5", "value": "T18CE39503B79685B3C789773AE9DA2500037EE581A267D70A3B4E37697C0377A9E417", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "a3ce7195-c45a-4245-af75-53e651e9d26e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "eefdbec6-cfd6-4cf5-8ffe-30b14cedfdfc", "value": "3072:6BdsksNWXyRI24v+GdS+gUNNMf7M0z8GfG:6BBsNzpIHSmNMfQAN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560827, "uuid": "b1d0af66-a867-40d5-b761-78ac769b8a2f", "value": 150016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560827, "uuid": "1e402365-1b58-46bc-88e9-092e7fddea29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a171bfef-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719560832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560832, "uuid": "ecf609a6-77b1-44d0-b1c5-036ffa8aa642", "comment": "Malware payload (PureLogStealer)", "value": "51d6c3f850923398dda928c4a71d6187", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560832, "uuid": "e7eab8ae-cea9-4294-a5d6-107637af596b", "comment": "Malware payload (PureLogStealer)", "value": "099e9bfa984f6f103f2765b2dc704b715e963efd748c8d3e6d96899e078bfdfc", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560832, "uuid": "6b0e0e59-f6cd-4c10-9fa0-90cfd0d87ede", "value": "T125F39D4A63E420B6E4B657B599F202935A71BCB15B7882FF22C4D57E0E336C0A532F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560832, "uuid": "4beacfc1-9beb-41d3-a371-3bdb18e63b91", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560832, "uuid": "0f8667a0-ae5b-4335-bec8-397e621c9771", "value": "3072:TahKyd2n31u5GWp1icKAArDZz4N9GhbkrNEk1l1T:TahO2p0yN90QECN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560832, "uuid": "45f8cb6d-c357-4afc-b1e2-ed40381fddd7", "value": 160256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560832, "uuid": "1ec54a8d-c34a-49d3-bae4-3ee3004400dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a58da772-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560839, "uuid": "b0169948-e769-4bf0-9d72-65a545784140", "comment": "Malware payload", "value": "db1c5194042070a6e7885730b0db66a2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560839, "uuid": "c1374dde-14d9-4799-8eea-13eff405344c", "comment": "Malware payload", "value": "69abc1231011f4d5ee67d200dad99d5156ace90846c32490536ddca6480fa488", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560839, "uuid": "30f6527c-e462-4de6-9f5c-786ff6d3b8eb", "value": "T1C9E5335CDB4EA3D72D8FC956C4D9487DA282E983E320F4E2AB18177235703DDD9B21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560839, "uuid": "fa88a36f-9f5f-4275-95b6-6bc3feab0bd8", "value": "49152:wr/tYRsA1Avkujtiz/YrCgAqe5lupVm0ZiuUtcgy1Lub/J950BVd:YV8qgMCgAp5um0Zi5Zy1Lu1o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560839, "uuid": "63cd73dc-7b69-4d04-a1fc-0dc876e35ed7", "value": 3075088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560839, "uuid": "c0e356f8-2cc9-411f-b9c3-cd90ac9eb935", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5fe3255-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560840, "uuid": "f446e1ab-62d1-4161-ad71-f3432c34f9d5", "comment": "Malware payload", "value": "2f4aeda719b8a2cf930964ef2f1d3d6c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560840, "uuid": "2bf66a11-14ed-4e0a-9d6d-281acc0e14c8", "comment": "Malware payload", "value": "7287cb4c8d4ab115ba01134536b09e942e905621c43a623f5c4f97b7d3a34fee", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560840, "uuid": "a1acd62c-d13d-4a40-a0b4-c42907924434", "value": "T1A0C533B71123138DF0551829EDEB35FE8D2364A88FC577785A183929679ECC7BCA34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560840, "uuid": "ba5631f1-0294-4ed3-ac2c-1b0ef7449281", "value": "49152:f5fguzH7GVEcFdoRqNth4vihsOZhb3GemjjJtiRfENtnjcEnf/xv4ZNt:/j7+ddoRqNth1LGrjjIETjc8t4ZNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560840, "uuid": "d4ef0a2a-ae15-4f3b-afc3-a9133e84d71c", "value": 2660368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560840, "uuid": "5374b1aa-d690-44a9-8d09-710a7fb98cde", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa090f84-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560846, "uuid": "fcd1ea48-3b4b-4666-9dd8-71bb398ab133", "comment": "Malware payload", "value": "5c4a5725edc86a27dfed13bf88fb6f42", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560846, "uuid": "fc1d8a0c-42d9-40f5-9077-a3fa2acdb729", "comment": "Malware payload", "value": "7805bb4c799d12cb50a9e4e7fdbd8a787b8a2b43f489ff609d835a9086929d8d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560846, "uuid": "86d4f9e0-bb80-44df-93f3-77c0918bd3ba", "value": "T19646338BEE4C6C21EE8DFB21D51BE95730CB9FC02A514A57B383BFB14B8051A9836D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560846, "uuid": "e953c6ba-4633-4126-b289-ada72e113231", "value": "98304:PaKVGUWD4u5euTAUx87NiLG00CZOhpBrlvpRHtS3ahL9KkO6gwpXAQ:PlG9Dfe9Ux87NGG00JBx7kQKkj1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560846, "uuid": "be202506-ded9-4f35-a741-2cf9a62877de", "value": 5532936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560846, "uuid": "cbf801ef-6687-4588-abdd-5f7d0f26d7fc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab982b61-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560849, "uuid": "edffcbba-4e69-45e8-8ac5-faec5b186569", "comment": "Malware payload", "value": "db527e671b1947fdb99b9a5a64f2742f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560849, "uuid": "e65d645d-b10f-4628-987e-8765e4f638f3", "comment": "Malware payload", "value": "d37950264bf9399009a3d7bc52af4f729793c7ffbc8fdc9068a9c8441347b8db", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "726ae43a-aad6-4362-82f2-64067f3cd6b2", "value": "T1DFD5331553DC62A7C0B91BB0D5F612AB4F317EA11B2582EF0686CCF54F636C0A63CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "6622a07c-cda9-46df-8ece-e7c511bb66bc", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "7219dd20-b871-4829-b1ff-df0fabe5d0cf", "value": "49152:w2ZLhER/o//gWL3vmqLkBDj6D357LvfYdXhcqbt/nDI9zU1lngBcLI6:TZouL3v5kFIBLaX3bt/89YnW8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560849, "uuid": "57f69d3b-673e-4408-af68-1b61d5568546", "value": 2861568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "da883f1e-470d-4fe2-a2ea-d921cb28d28f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abb8cd0a-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560849, "uuid": "6d01c95e-2495-4ee6-87d7-ecd20b2bd316", "comment": "Malware payload", "value": "1097aa07907bd1aee13f973026b11afc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560849, "uuid": "93471350-55bd-40c6-a316-cfb837209863", "comment": "Malware payload", "value": "cd6e461a0afcb13106dccf2bf0794667c4da32a1b2610cc3ee5fcc89b00b1e9a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "91fa4c1d-6b4b-483e-8722-736a6f5fe880", "value": "T157B5335278C6FB12F9E2E3F32A42A947AA32D001343557F8C5BE490746BFD488EB55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "40195d0f-ae29-4f88-a1dc-17c7d8741684", "value": "49152:USJtKfoRnNHOC7GV8RCaZGvD7n3dJ04ql/7io9+Q7YT3ag:PtgUa6ga8vDDf7qlmgSV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560849, "uuid": "1ef9e6dd-4f94-42f1-8f3f-c1ad431213e9", "value": 2423304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560849, "uuid": "80a3dbe7-6cff-42f0-8ead-28a0e42d95b0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac67007f-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560850, "uuid": "90e9707c-0016-4420-b694-c19ecf7ec87b", "comment": "Malware payload", "value": "ccbb719ecfa5ecc46294ada5f1ade8ff", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560850, "uuid": "8b62dc89-59ef-41ac-819c-219d74d30e4c", "comment": "Malware payload", "value": "0ff37ed519115e346199455d01eac8224285338e3aea72d2c73198460a7381c2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560850, "uuid": "9e710475-3098-4a76-9b5d-98dcdd15785b", "value": "T129D533D7E37F83DEE74E9307134357486AA6A3A99370228DE3041BDE12D949E8ADD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560850, "uuid": "a12ee057-cdd4-49f6-928c-d9b7e6c87594", "value": "49152:X1k7fBcyjqjQAtwAQ51qKK/Wq17Wbbu6jmdKqocvecCvyJ8rbrpg6t1YtG:XwjGQgDQ5XMl17WbSvlO3vMG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560850, "uuid": "961c7c8e-173e-4cc3-bf0b-a3fe209f5ba9", "value": 2830856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560850, "uuid": "a180e1f4-349b-4465-bb5e-32c8f1f0afa4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac9d522c-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "cde5e6dd-3b22-42f1-86b4-dfaf2c5f4aa6", "comment": "Malware payload", "value": "ad5383058b21da3b444c221c738ab335", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "1de79a2c-2e3b-49b6-be2e-00a462e1e655", "comment": "Malware payload", "value": "864ff3d4cd9def99955fd67c166e5b3dfdd5fb8e6a4172f92ab74dc60314fbfe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560851, "uuid": "439b6398-c138-4ea6-921b-ebbae04a58ed", "value": "T1F7D533049CADFA1DE6382A90D33AD076BF454046A7722A40A3FD7657DDC54F3292BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560851, "uuid": "fe2b11fe-2460-447e-84a8-295158fc956d", "value": "49152:H0sE0onbk4rVkpkzFcvvruBGYc50qKQmLAFoMagf62ufPiiCKhUT+9ytc+TW:H/ZoY4rV8kHbqCC3PuCEYa+TW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560851, "uuid": "b8f3124a-3273-47dc-a429-3f5c50e3ebb4", "value": 2829328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560851, "uuid": "8fdb8587-d058-4f91-bb01-d691cce282c9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acadde93-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "62e859aa-dc5e-430e-8710-83f94387b97d", "comment": "Malware payload", "value": "9384a373c6a982065cb127f18fd62b81", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "e243e12f-d652-4c5c-9ac6-e87e070469a7", "comment": "Malware payload", "value": "94135c6a03007737d76c05d80539de02ba7d7e1911d692574c4f87b0da68143a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560851, "uuid": "bf2077ac-cbce-4d60-b873-87eadf2ba214", "value": "T13AD533047B1954DBA863C4295B7B24B31614AE19833EB1A2E38D5F9C33B9C3E1C9B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560851, "uuid": "76e50099-12f6-4846-b94a-5ac0246f17a2", "value": "49152:9ooE4f4+6zkF9ebJDr9yvEpi60hdwKmrQWwaFbu8OurCe76Ft:9fE4fB1ebVr9MSSdhCb1u8OqZ6v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560851, "uuid": "cc55fa85-abb9-4a5d-ad1f-fdbee26ae0f6", "value": 2829832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560851, "uuid": "0959b5e1-ac12-4b41-aecd-b9990e541d8d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad25d80e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "4650404c-1d22-4d5f-a4e8-63039adb9874", "comment": "Malware payload", "value": "eee81e834a32b14859cbc5e98576a983", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "966a09f6-1d15-49a6-b328-d6a6f9fe273a", "comment": "Malware payload", "value": "bfe39fd5feaa4d5f423d09472bfd623c3a0ae5a0ac71dcba1d0e00ec650b4da8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "e5d49b61-30e8-4042-89ee-57d238123070", "value": "T153D533B9EA04D0B4799C9E503B4C9CCD426AC5BF735D6ABCE048ADC8C8424DFAC68D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "a448445c-0432-4ead-b6f1-dc285522b949", "value": "49152:zcWiiOEp0XonfUDY9q7cHRe2Lclvcefsf62sNwHXgelX2dkMGZKI/Zm8PLF6onbG:QW+XmfI+ReKcNfy62sWHXgebMGoIxr6p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560852, "uuid": "15ed21eb-1d7b-4427-bdcb-adc340fc6ec8", "value": 2830352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "1ad04369-96b1-4e5a-a0b9-756368bbaecc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad8a6986-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "c8fbca3c-e1fb-486d-9cc3-8f6605158357", "comment": "Malware payload", "value": "d2e90a1312a55dd156b4c0b8093c6ba9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "c6a02ab3-fa1b-4490-a8b5-80707f837137", "comment": "Malware payload", "value": "a821a529f1be74cd34f7851b61b12931cc957d187af904f469fa810cb05460e6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "d9f9f58b-5f4a-44cc-9e11-27a85e396323", "value": "T1EDD5332BC4A9004AF7DFDEF58DF32170083AD2447A91D504EA46F15AF848AF7D1A47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "8d542743-d4f3-4ea6-89e9-a89678f27c2b", "value": "49152:8h8TPOpIchaVaYqMyZBMSBOxqRazSqDoOKxsr6lgZx/heCMswMHkS8:8h8TWizaYqJN4qokO+K3TpeCJHkT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560852, "uuid": "61ec9274-30b1-4238-9484-6354638799a3", "value": 2825232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "1611eeed-2a93-4e3d-b364-251275010ea8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada05ddb-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "8b7c4be0-0615-4109-ae9a-b4448a71987e", "comment": "Malware payload", "value": "0042a16b9747368dbd923cb97ae2917d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "6acba5a0-0964-4ce8-88bd-1d014f79ac9c", "comment": "Malware payload", "value": "9b0e8a013d980ef97780eaf6b407143ecd500d78946ae6f4ff8bf89a78bb7de8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "4074784f-46bf-438a-9ee4-e21675299f37", "value": "T1C1C533123D35E9821717BCAAACA308BA27168517B3313610760B7F9797E76538D1F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "2f472111-724c-49d7-9acf-11022751a9a3", "value": "49152:zb4pmtdDqzussvsjklqh983vPjg2M2NSbMEjULFflyQImNLGSjUAjg663bc:QQdofs8J983vPrsbLjUt0QFNSSjUyg6t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560852, "uuid": "dc9ce5a7-a810-4ffe-b8a0-cb9c461eeb02", "value": 2661392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560852, "uuid": "d20ba0db-7e67-438b-a25c-2a0e4221255d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae6b8987-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1719560854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "2bdafe23-d372-453e-a1fb-a7e2e8b508f4", "comment": "Malware payload (PureLogStealer)", "value": "80ab4901e0e9519b8d3a6b774a822f8b", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "8100740e-b99b-4109-baaa-65f184662d42", "comment": "Malware payload (PureLogStealer)", "value": "407fa06249007223b302b481a49e1abaf8a10fe3409e6812c6f2fc9ff9e29582", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "684cbe08-43f4-4b19-b68c-b3ef4a93afef", "value": "T1C0D53324276C472AD1BEA1FEB09201499BB4D3BAA70BE796F910F5F11C073518BE71", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "1775a63f-2338-4d01-8a46-48df637e17b9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "44ec0ec6-4d0f-47a1-8982-fecfa6e7bbde", "value": "49152:HnfT3GGQtfuwFLich65S72+o49kBIXZGaLGqce1HMggnTkLRR1oEiwqP6PbOO:H72GQV9iI6dakBzFCsggTkdR1oDwyqOO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560854, "uuid": "cd75c90d-f869-4c53-a715-8929c5741787", "value": 2801152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "afc5d058-487a-41e6-8780-7f7625749f7b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae1d0959-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560853, "uuid": "c75c5b96-4c2c-455c-830b-ee7896b780fc", "comment": "Malware payload", "value": "5d6926a55d3ee345cec17e4fca84d0c5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560853, "uuid": "ffc396f0-1120-413d-b0c9-32eab05c1cb0", "comment": "Malware payload", "value": "e18d0216c40215f898aca662ce3eef80b81fed011ddfb70debde008cc2ea2c7b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560853, "uuid": "13dbd205-de5c-4ff2-9c9b-51396e597143", "value": "T1C5E533C6ECED061A9BBF742B964391B50544C1E37B4A2F67ECE603026D395EE109F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560853, "uuid": "322273c4-e95b-42b1-9a2c-e69f156d1b56", "value": "49152:UiOIbM46C4pxSAuz5imrmwZOB/c8acMi3g5lV8pp8vqgfYzCZroTYAhcq5z8X44H:UiO746bxSN5i54OB/9acMUCV8oisYzCJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560853, "uuid": "54030d98-0d3c-4996-b3fc-f6e609f5507b", "value": 3071504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560853, "uuid": "2121307f-2ad4-47b3-90c8-1037dec98b97", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae72968f-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "006a60a1-aeee-45fc-8803-d21505558c99", "comment": "Malware payload", "value": "1927992ddf8ae055740e3ea8c64b29f2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "835d3eb1-eab8-4926-bd92-c2a9a74d714c", "comment": "Malware payload", "value": "b0fb3fcf0a031b6c4a6e69e974a4489039ee188581819ec853813ad7d637b905", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "b7b95968-890a-4ad9-81b0-b3f08b0e31bf", "value": "T1CCD533540181D2A39137D4C632EE9DE28F594A3DA2B92AF0DE2013BB94FD9E4FC1B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "1b7163e5-110b-474d-ac0f-e3dbe42e89c8", "value": "49152:UxKc+1q3UXydungEuBP5WjxO63oCxYVwr7aRbrI3zwoJNlIFECzW0oQSRG:CxkidugVB0xO6Yo5HaFazk9zWvQF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560854, "uuid": "c6bfa238-fed3-4446-ad38-6cc7453cf47c", "value": 2864144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "1a351a64-fbda-478f-ac33-7d04551c537d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeb7ea0c-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "f241ef1a-59bb-45a8-abee-ccc902bad3a3", "comment": "Malware payload", "value": "858e49b944914749e9402de6f23456dc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "e9e96685-8a77-45b2-9da6-4516beebefad", "comment": "Malware payload", "value": "916b9047251efad7190300ac3d41e19b0980d6f852de250b2a5de6a78970ec6b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "0a390529-caa2-4ea0-862b-5c7eb96fba43", "value": "T10BD533CB0BA7C96CCC48B2160E37A84BC5B35517070ABCBD8FA594FE1D0375E94A5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "09233a35-ee39-42bc-94ad-a5ce92365e38", "value": "49152:gHRM84tyYI5YDSGwKInAiOnXkrG2IUQSmBRuIkqk6Pdz0fvaClGg0ym/eFYo6:gQt85kDwrAfn0rGJSmBRulqkaUi00V0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560854, "uuid": "2c7b439b-d387-4543-9b82-2480184a5a9f", "value": 2978504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "5971b7a3-582c-481a-9af8-f9a1ba23af0a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeb90a5f-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "f30a6caa-f6a2-42d3-b77b-45019085b2f8", "comment": "Malware payload", "value": "b7607c47110219ab1165c820a50c7821", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "0cb38871-6237-4caa-8b2e-12d2a05a2c76", "comment": "Malware payload", "value": "2d10d9567baaad27d97549403f2e3b94d4af3e9b14829f17b61ead92ec42ee03", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "da1c500f-e94d-4c6e-9d64-0176aff97134", "value": "T184D5339CE6E66D3830EC7B782E7B4479C17D34D430A6342556CECFACB125A1B6A903", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "7e9f1bd6-6620-4061-80b3-d33e55970408", "value": "49152:SIu/SpwA6u5Re0zkTUQP0aK/XLFBw/PdvNdMS6QJQlEhbd7C86eUdQC6:SIGA+UXzf8QlEhw861yC6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560854, "uuid": "9728f45a-e660-4dd0-a614-ef0e010fb0f7", "value": 2828808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560854, "uuid": "3c967c1d-f900-4a51-a5af-b69cae7ea258", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeeb6563-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "9e450199-3455-4c06-9f8c-50af1a9dc8a9", "comment": "Malware payload", "value": "8d6570728d73aa59a9f9cd418e17f84a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "b8a1f16e-87ae-403f-85cd-e9fc8c9c19eb", "comment": "Malware payload", "value": "510aabf0c2eb7108828ec1fd431a7b5416095fe4a908e3408444851020f90aa0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "3be51319-7595-413d-adc0-52c33c9d6208", "value": "T16DC533F3B7C488DC59C326A9813F26D82581B576B13527CFE27E78A275770249F881", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "4b3f5e23-ed68-4e67-ba3c-f4ae6edbfe1f", "value": "49152:QANe7uk6BBtZA1rZZPeySaQHnB+MMcE2BxaXf68RFB0fLFdjyyHVh+U0nytoQ:Q6zJ2MUMB+MMcxfadP0fLFdWy1h+Fnyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560855, "uuid": "0cc4c854-ef3e-4f3c-81f6-10e7871d6c91", "value": 2666000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "ddf12c38-7653-4b39-933c-c7b0ce36bf9b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeea8a2c-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "ac9d53ed-9f2f-4bfa-9ef5-5487b1c5b81c", "comment": "Malware payload", "value": "d51c5244fd96c203503864ddb3f0f04c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "a19aabb5-437e-4812-8c1f-15e7e7bc4159", "comment": "Malware payload", "value": "e851ff99488b2202429b838f7a84c30d80476dae14691f9af5e1fd5b2e72400b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "8c143e22-2c9d-431f-993c-0aa4083a5f9f", "value": "T1D8C5337BD7FD3856D351A6AEFD409E3B86F24444248DFBB6C9A9F6101C83092A1884", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "cc816a1f-07ba-4934-a66d-d302d16e6c79", "value": "49152:CFJOKDDny8sIpmfDhx9VXcaeviBnXEAzY2Mv9JPvOdv9C9f:CaKSZD9VsxRAEvv9NvOR9+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560855, "uuid": "e520f282-6f31-4dca-81bc-335d7a128faa", "value": 2668040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "71aa2c56-5123-4577-80ac-a2a115aeb2f0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeff0466-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "be43ed69-dc74-42fb-8407-4348dd5cffb3", "comment": "Malware payload", "value": "efe0f439e175baa2f393edf07dbe32d0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "47f666fd-9326-4da4-991a-087e1da005c2", "comment": "Malware payload", "value": "369773e19120e97e7a4df9257f7c527db5e02e5afe18b1dd6bd2d8c2b301d8ac", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "de2725d9-088a-455c-a82f-727c5672eef9", "value": "T171D533F2929D5711FC6EAEAE72C8E96563CF20B5F04B75BD22FD7E3CAB0860940148", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "e49c9b95-f8a7-4b85-90b3-f55e51039f13", "value": "49152:3UFi7/xI1zVs7ooylx+jWXVedUb5+bb7o6sBe32P5qZMy7B7eZ7:3UFiLxI1hs7ooyjRp9+bTsBSu5qMyt7c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560855, "uuid": "e4053034-9886-43f8-81b6-0000bb963aa1", "value": 2826760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "5950d2f7-4cd1-4f4e-8dcc-0e532ab86e73", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af103157-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "e8a9dc73-c66a-45ee-9a2d-1f629ce6353c", "comment": "Malware payload", "value": "43c063c9aa50284ec294750988561017", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "eb3a1876-e93b-4cbd-b8c5-4474a73f715b", "comment": "Malware payload", "value": "7156b3fb24153ea7234b46ca3ea227da29ce9a6c6477d2f3e1fdea64d47a4b19", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "cab95a48-bc87-4916-9be9-1e4f113b34a6", "value": "T1DEB53391554F0A7A474430AA7E56EEDB5FCF1041BA6C509A40B063BA30C8BDE7BFE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "f988bd53-1a1e-4da9-b822-dc764dfcd5d7", "value": "49152:DeGfz7X+UdtJkEK+L9mcHTK2LI0nYe6+nhfIFnxOo690WsnR:DXz7uUaB+L9mcmjWR6+nJIFnxOo690XR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560855, "uuid": "3e5990c0-5272-43ae-9d0a-7695032ff117", "value": 2426888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "73d7b337-508f-4c68-8fe0-1c3179ae1911", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af10fb78-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "57d28103-f6ea-43fe-af39-ea09e3e429be", "comment": "Malware payload", "value": "70242e88dddfb58d01421d51a6a89ed3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "166a7e74-3afa-498d-a7fc-a7340fd0a38a", "comment": "Malware payload", "value": "5bf745cf699b2f3f60cde54154d4c56aa96125f9d4d9333b65b6f0e2d4cb1f10", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "6605092c-518f-4ec3-a657-572fdab94612", "value": "T184D53375132680D8A2645E2FE9C349F9F1263D65B97C1E442FEF1808FFB82651BE2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "45f9ec90-a81f-444c-b6a9-7785a81828e3", "value": "49152:MnyWwrXYap9J1lGWH+rEQxntfYBi5GuQfrtq+W913YXWx7sstn8du2pI6rGm:ZbrIaZvjSEq6lZfrGoDSGJIFm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560855, "uuid": "830ad739-3dc7-4c01-9bce-2530e068d504", "value": 2831368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "f0a451bb-59e1-4736-afe4-03ab3aa6d978", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af529450-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "74823897-727e-4ecb-abd0-9ea6e58edc9d", "comment": "Malware payload", "value": "42127bc6f915a02ff7bc7b3995af0922", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "3eb4f5e5-1ccc-4052-a206-37c4567c03e9", "comment": "Malware payload", "value": "7b061d8428d517a6f54368a523b9e02be1b95a525eab8669f2a068243dcc689c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "ac00c5cd-e100-4591-a7cb-6a04be1067ee", "value": "T1E0C533067329BD683066948854DA8BD24200B5FBA4BCB9471A6C9F9F7BBCE74C5C07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "d0177f21-42e5-4fff-ac5f-eefcad138453", "value": "49152:4OdbJn/qumcVqU5M3ThB2r0Vk69qa3Bu5uGb+wEMRpCmxs3UZ6WoKb:xbn/VXehMAkqqag8G6wEMRpXxew", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560855, "uuid": "828513e4-3abf-43d2-9e59-8c7d138b44a1", "value": 2663944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560855, "uuid": "e2eb4c12-c79f-4db4-b99d-5c919d9890ff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af6be481-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560856, "uuid": "44b75cf1-bda2-479c-9cd6-322da253b60f", "comment": "Malware payload", "value": "0ef546f85c84d9b0a2cfbda880584049", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560856, "uuid": "a5974d5a-8c5a-417e-9042-773f875700ee", "comment": "Malware payload", "value": "8547acaeac956cbb78771086b2845cf758f235e22486ef7ddfd81ee1965e6b29", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "fa9c8bb5-bbe0-4d4d-a65c-27144729f9eb", "value": "T1A4D5230827BC47B3D3FA95B9F0195548DBF2467EA26BE7D71400DCE82843B879B521", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "75e768cd-cb2e-442f-b48c-e146d2b93956", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "195c7e08-e5a4-4534-b983-d7f8bd051c03", "value": "49152:JoX2LsMBqC11Ed7Nse9InLiphaNPI5zRX3vE4hsJCGCwh/9MqT:Y24MBqAEdRsokiphaF+zRPEcu/9x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560856, "uuid": "12d651a1-6366-45d4-86aa-83fb2e76abab", "value": 2798080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "69d26e3e-ba7a-42d9-98cb-92c006b4ef4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7ef967-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560856, "uuid": "54364da6-d977-4781-afd7-03b40d0bb15c", "comment": "Malware payload", "value": "e3852070f52e2ab57e915304392027f2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560856, "uuid": "63e437b1-c5f4-4205-b364-95c365d61346", "comment": "Malware payload", "value": "16eba55d8152855e77a23a862a8dc863df92f7edcb7c51c1e0f7b80c7425830a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "be659243-db20-4c25-81d8-73bc2c2d057f", "value": "T12CD5333C917AA6E01232F04390307A9CFA572801EAC56EDA9D7FF645581FDF0591A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "5e69491d-9318-4d73-b24e-1c352c616872", "value": "49152:m097wBBvHBBGOm3OZVgJ3c4Ire8xATtuT/r9zmA2nkQLlReZ9uDzDC5ObMdZaAV3:B9Ebub34V4LIQToiBkQLHeZEIOA3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560856, "uuid": "c0928b65-f8a0-4139-ba73-a306c36f7845", "value": 2830344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560856, "uuid": "51b55bc1-aad5-4a25-880e-64f8744630df", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b004eab7-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1719560857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560857, "uuid": "f3d168f4-f41b-4daf-a0b9-d66877e02311", "comment": "Malware payload (DarkTortilla)", "value": "4a922d6992bf344a9c7644152f2197d6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560857, "uuid": "4961407c-12e4-408e-9337-150e928b9765", "comment": "Malware payload (DarkTortilla)", "value": "3fbeae5e48d7f3b2ce4beac3347d9aa259fd2c9c6f5485ae166e74dc5268e071", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "1bea316f-14ca-4aa9-be32-85213bc1248d", "value": "T1B456336E57C091A6F0B9933C509A45038EB27992A712C65F5BE8C4140FB1BB8F732B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "eb9688c8-04e2-435c-92d1-cd6cd55f0fa3", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "842318ea-aa2f-4efa-8390-eb02509b4e5e", "value": "98304:ZaXtcsYpSvHtspnAGNkg7O4MrThvpXO0xWs80ADgPmGzG5zEuACQZ+uCJ1:gjf2pnAGN17O4MZlnxVmgmG65zEfz+uU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560857, "uuid": "591524f2-5d3b-4305-b737-cda682e972f3", "value": 6105600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "e29f3a8a-cf55-4e44-bfce-ddefb21a4fcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b025f115-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560857, "uuid": "447e9c52-757a-49e1-bf13-6f3c27ca4d00", "comment": "Malware payload", "value": "925f128a8f3def42f97fdd75c0f825d1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560857, "uuid": "e24e0347-cefa-4cbc-9615-d9972fb198f1", "comment": "Malware payload", "value": "b5b5c5b1ae6a67bc26e77acf8218c4d2a13d67f7f3b1eb58cf210b3c15005bbc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "3e1720ac-27b1-4c97-b409-871ae3d3c45b", "value": "T1C4E5332FD9D2B750BDCBD011624847E984B0C8D3F5F9A0E27E5E66A739776A500C1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "c710bb6b-90d4-4b18-b5fd-220a88d407e6", "value": "49152:0q3TsZHC6pTx+85muSOaON7yPQjiq8M81bkIOOOp5xtWi47RX:0CTsk6rou8ON7yPQjiq851b9pS5PWF7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560857, "uuid": "7af12dc4-f54e-48f5-aa10-55b8a6b15c55", "value": 3074568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560857, "uuid": "01112717-f0ae-4c46-b70e-6fa6c39c2ea7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2fd2a40-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560861, "uuid": "c86108ce-7056-4c85-87cb-6b741f28453d", "comment": "Malware payload", "value": "dbaef8f1b3e8bd02526272c489fdf0c2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560861, "uuid": "9397f6a9-0ccf-42ec-a697-48c66ee7e63d", "comment": "Malware payload", "value": "b6cb28d33ed249d8e1d7384c0395076f17112fd3927373ede31f4d3d7e4f8a48", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560861, "uuid": "3512ef1b-d1b1-4685-a355-39a290368254", "value": "T1A9D63347F1CD3C096301A3B728AD9792B97F1D7D4682EE199A1FAA05FAB8F01974C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560861, "uuid": "77b49b68-7649-4f4b-94bc-76e985459d92", "value": "393216:+wurP+AfZW7QQ7i7MiUPUovwF9g269vfX2Z6pvW:+m7QhMiUPUoYFC9XpvW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560861, "uuid": "ca59de31-c4dd-4b8d-9e79-a1aa3a94ae82", "value": 13672969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560861, "uuid": "8495d589-4f60-4a52-9ac6-a2d4d53675f7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3452b14-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560862, "uuid": "c943a42c-fe74-44ca-8d6a-de772ab3a938", "comment": "Malware payload", "value": "b98842cbcd69bd846a19685d8ebeb4d9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560862, "uuid": "89992e5a-78ad-41a8-a3bc-6c54e31fbeca", "comment": "Malware payload", "value": "25b3bf58fa811726c434f9fbc808625f7e31d0c23fc36fdfca5c2b3f250aa799", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560862, "uuid": "92ee0b2a-0145-4d8b-829c-59072dab178d", "value": "T1929633978D18F581F828761BA924F0B9F676D518F739E38CBFE65EC184982CE0C825", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560862, "uuid": "e27f1976-3bca-4980-85fe-75f02cdab9b3", "value": "196608:DH4Bb7WXK7NfRbT/8e0wmsRaSV7CMY59eef2mu6L3tmVhlNnGa:D2TJd8ICMY7eeFpLYl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560862, "uuid": "26914119-52ad-417b-b8bb-13b384f45633", "value": 9421263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560862, "uuid": "fc6db37f-8965-4ee2-9cc7-e70ae97c4ede", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6f707da-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560949, "uuid": "1eb830d6-6363-4822-93d4-e7c8e57480c5", "comment": "Malware payload", "value": "9639e706961b54ce6981de3c5c5675ae", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560949, "uuid": "114752f6-3f13-4354-aca2-9e9e49e184d1", "comment": "Malware payload", "value": "15afb5e8418d383c9a00e30c24e997cd90fcefc4a30ffcf80bce93e33dc3d168", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560949, "uuid": "73df4999-5d9c-4c4b-9139-740d69325a1c", "value": "T1D9B533BC000CD8DEDE823095DD7E0AEB6778C4A297452F3987D8B36245BC726597A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560949, "uuid": "d8a4c18c-fc38-40b1-b2c0-3bb036e3c4ee", "value": "49152:yFsQPHXIaXMcJz28Orz3mtaNTAVj0q6mhlAi9xoS+bISxvpfgimkqpr8:yFsQhca64aNy96mhlLQpfgimZJ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560949, "uuid": "c9582697-6ef2-44ac-86e0-b2401798fe57", "value": 2475528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560949, "uuid": "73845f95-72a6-4d8c-8a41-9b5afe86f24d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea156d81-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560954, "uuid": "4e8d6f18-5f27-4f06-9d53-0bb569789298", "comment": "Malware payload", "value": "16bd52cf647bc35e25397721b3338300", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560954, "uuid": "d78db9ba-0cf1-4279-9132-d7ec14669ec9", "comment": "Malware payload", "value": "f41d2e38f877a78f35680b849871147913f99a61ec01db29560e5f7dd2402e89", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560954, "uuid": "40bbd4fe-6143-4b67-8e8b-4665c4f49cdf", "value": "T195B53368E75CBA462CEBFABC59782680833175A2FC5336B41723BA09D41DC1DC6D4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560954, "uuid": "c6207c92-3ab2-4322-9089-a2502e6adcd4", "value": "49152:fLykJ3xC5SmJEavT7fO4XAuOhaSigt96aGB4CaSgabTDO/RhPaJf:jfMSmGWLO4XPatP8TDO/wf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560954, "uuid": "d502df6a-dc0f-436d-a4d5-4e3069f44f51", "value": 2467848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560954, "uuid": "1ef1d3f1-3b6a-4eb6-9508-356f8a8f85d0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eba8a4ce-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "e32a6305-d719-4302-ace0-fd6b33d02079", "comment": "Malware payload", "value": "5dfeface1500659e6e9170631fa793e0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "601bc0fe-f912-4459-8498-e78217b76fdb", "comment": "Malware payload", "value": "cab099448ff27d97f7678bf379a1f00c9209282bf3e0428a787d30e1973e09e8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "41799c40-a824-4b82-b843-6f887ad151c6", "value": "T14DB5331041EC648DCE0BE1247414291EF6A6AC4F527CEF9AEA901693E93D3E6DEF5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "59ff159c-71e3-40fe-ae19-1616d5b7ed8e", "value": "49152:MDmSIrehJ2A3w33BhhsaEoJYwkHDonmQP3NnRtblcLGNx:drxAUBzwU8HOd39RtbWGNx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560957, "uuid": "2064df1b-8a7c-4f06-8d86-9212a9781336", "value": 2469896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "ce8bc839-8643-42f8-ac19-d242c44f3c73", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec32fd36-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "02d2f39e-d929-4593-ab90-3c428cec5b20", "comment": "Malware payload", "value": "505c6e45ca7c2e0fd874cc1712ceab76", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "60740da3-773b-4a00-8975-e7ee83c73f08", "comment": "Malware payload", "value": "77c3f747830ceb55622dee5764809a16f93e5fb94c42b7bab49b64fa3cf9c1e7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "e257e866-52f1-4797-ba87-e907ee1687b2", "value": "T152B5338B6BCA9CDD0EAAC03A7379CCB220141E5B16C6861A6CB4F9F6475F9017F584", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "bfa355b9-c8f9-4a11-9c5b-29b1b9013368", "value": "49152:jdZILUK+0Vlqr96ZO0mIhf0RstMTH387L7GP+pOIiukwvfI8n5xfA1:pK5+0VIr2O0mYfd2H30LIqOIDkwY8nbE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560957, "uuid": "ad1260fa-5693-4112-b4a8-ce4b56cbbfc6", "value": 2467848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "fc33bf5a-a6cb-4bd2-ae87-d5b30fb2886e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec352c7e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "4d8906fb-b605-4bfa-bade-6c26dd5663d3", "comment": "Malware payload", "value": "468befda4e6b7b405668d054f0732351", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "e52dd361-8371-4f49-ad14-350d5362ae52", "comment": "Malware payload", "value": "5a20cbb6cb59d35c8991949da26aa07cb0eb865a0fa6ee226ed877297fe1df37", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "644a2a97-39e2-4a7d-9ec3-52869ecd3b3f", "value": "T185B5332056921F1A2C015D629FF32F2190FEE435214B3ACEAFDB518BD81A54FB78F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "ce43a5a3-013b-4293-b4eb-98531a502ffd", "value": "49152:X0+hsw6TatP6stSQHrfczG754nuwujoJ1t86TAu+tHYPfMUFI0wib5uV6h1ft:kos1adxtSvzk52djqkAusHYpyJ81l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560957, "uuid": "70cc4e76-5d3c-476d-8b56-73a1184de944", "value": 2472456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560957, "uuid": "d3fd8673-fd5f-4ec1-b043-3eab8b74d008", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8c4f14-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "984d8d80-cd02-4da8-90c9-83d18b95cde1", "comment": "Malware payload", "value": "5d13e15b44660055e63179aa370e6c01", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "f80c744e-48fc-40f0-b558-73bdd4f7942e", "comment": "Malware payload", "value": "83e3b7fecaf3a5ee79d81fd6729f06c74280f4eda711404d4dd5a0fbb9cf25c7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560958, "uuid": "0ca2de55-454d-460d-b662-7174e450fe98", "value": "T12CB5337D2D90033B8749D9FA4E9AF1DF9D7058BCE80A8B7B3974D85C914B2AAD3056", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560958, "uuid": "cb7542d1-dcc0-4f6e-ae25-1c6dfe5cff4c", "value": "49152:g9CWbN+1joQmIL+hBqprKhjYS5xUxs6uk/OCgIj/TOY79YMEFnT7:41QyQVLAqN+jYSvT6ukxGM8v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560958, "uuid": "07259f1e-1bb1-4c9f-9a01-0c9c49d75120", "value": 2470408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560958, "uuid": "7170cfec-8fff-4694-b120-20ef7c4aeca6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecb6dff4-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "976fc49d-8ddd-4f4c-b24b-f3517e833346", "comment": "Malware payload", "value": "d56438a3f209d2ef6be4ab46f911310a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "ecd89e48-8548-4ade-92f2-f9f3b24a82d6", "comment": "Malware payload", "value": "a782dcc98df99dfbe1b0934415590ccd246e132889bf95cb9e0c2650e74ed65e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560958, "uuid": "af514fe2-4463-41fb-b4f9-ad12e27bdb50", "value": "T105B533E24C9DA3B63825C23A54CF08C257EE4AEF06D7E13D14B2FDD1E60169D93D1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560958, "uuid": "79d39fea-8dd8-4415-a9a4-680075c96a45", "value": "49152:YQlOpXNT7+DsTnTxiQZ2EKPe2AK2MgJ87d7q54CQ10Ldi:nadTHTnTxiREK22AK7T2yiU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560958, "uuid": "61a24bea-a3aa-4c1a-a95a-e489732dba7c", "value": 2415624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560958, "uuid": "2e2d3eaa-8441-4101-88a9-6dc9602fcf05", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed0c90e4-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "3e0b901f-820f-42c8-b0be-c988c391b211", "comment": "Malware payload", "value": "2172d6203ec9749fa5a95e9bf2de60b4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "7128ee9d-1f32-4bca-9784-b744293a659b", "comment": "Malware payload", "value": "88e56e29a140f8fd248fe4cce8d42f3c64109ac5e6da60b575172ce3dd4684fb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "e89155af-3ae6-4274-ab0e-e07ffe1749ac", "value": "T1C2B533D0EE017A2657A6D5336E8E1B4682157E9342FDC2F2129D108D37D4F7AEAF3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "4341e88b-a712-4bf8-9a58-4d7f371154b2", "value": "49152:f4scmkNyj/34Rrsc98zHB+TBdveXJ/tkEw7AwcP+u35Ugzz5X7Nh1:f4skNevO1dmltkE0YX5UgJXJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560959, "uuid": "26004fde-ebef-454e-8b47-69a85dae5d18", "value": 2471944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "4d826fcd-656d-4312-8012-35a9f0f0a872", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed0cf6e6-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "3dd9d63e-b766-4f1b-a3cd-4a6db17cdf8e", "comment": "Malware payload", "value": "ff19aef3a1e35de927f2574dca877abf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "8888a5b9-2014-4ca6-b1b3-1af1547074d6", "comment": "Malware payload", "value": "53394f1a2f39c497f72b3afd6c63df81b0a45f7c573c5f6ea5083eb73724eb4b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "557bce91-d0e6-4ddd-84ad-982091178445", "value": "T180B53306AB79646BA7423304F56051EFC17F1524A81A322A07F72EF693DD83A2ED15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "da2acbc2-bdd5-4677-90b4-649c22730da8", "value": "49152:R4DsAW2PwfXKiyPsfGWIeaE5kHJ3QenfDhpSGwc9rS7JgGEQg:R4wAHPwPKiypHHzhpSy+gb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560959, "uuid": "693cf0a1-4f60-4f53-9af6-5bf7f7d66efa", "value": 2358792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "01d063cc-0796-47be-9e43-baca457dd59c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed0cce94-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "ec63ba39-0379-4a9d-ab27-0cd34966bb51", "comment": "Malware payload", "value": "4d0b469b8311aa2cc7e4e847e7a1a0b0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "564f6caf-0e3e-4683-bb9b-e37206461625", "comment": "Malware payload", "value": "1d75c9d1436d192fe784de1e6dc617c8ccd87c35f2a04ef85f2d1d3809aaedad", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "61de99fd-2384-4d2a-802d-50430c6c4ba7", "value": "T175B533F291841FCAE7017DA0724AAED5DF50202F6CD2A2939B71C983F697107FA598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "d0f1fe8b-5761-4fa0-a3c1-3885a0d37f10", "value": "49152:UsglSRp9EIVdfoRPS9pVBIcJif2Gugn6wx9RRAyJH3tJ57dW:UsLp9HVdfnD382GuErfH7O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560959, "uuid": "0ce5304c-bf47-4097-bffc-3809e6683d47", "value": 2470920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "92f03e72-bde4-4bea-be96-8bf5c9f72ee4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed0fa566-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "50555663-894d-4ee9-9736-a09019c79dd4", "comment": "Malware payload", "value": "1c14658e1ec9df56920672a2cb7a8295", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "f676eef1-c9a9-4389-95e8-3c7ac8c9d9f3", "comment": "Malware payload", "value": "9b6e56dc0b5e477e7df93b3a737932691f18e5a0d42b1635d27c77c18a954fff", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "0bb54028-661a-4604-add2-846c7d345cc4", "value": "T1BCB5339CAC1F55370804DF3457AA87A5EC9DC530D8DB287AABE408F56B83A4494B33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "c6c175ab-29f3-4c6a-9112-0b71f29f2750", "value": "49152:DiqacMkidbalRMjahvyyerfZvQU5gV8k3DFz4bdbssF4L:XaBkAORMj8erfKU5gVfxz4bdbzKL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560959, "uuid": "5d92f239-7e11-4e18-a60b-c8d3d73989e9", "value": 2354696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560959, "uuid": "dda00887-37e3-49b1-9efe-3095c97a69e2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efb11682-3522-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719560963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560963, "uuid": "4de2838a-ae4d-46a1-b0bb-64604fe9d35d", "comment": "Malware payload", "value": "898b791673306ce09811aed6cdd79f57", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560963, "uuid": "b3015d2f-40c8-45fc-a187-20c6f6574082", "comment": "Malware payload", "value": "2728a7c1a873a91c2e00f023b3024425975aee5a5a358a76ed63e4127a044d3e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560963, "uuid": "ec242cf4-5673-4b68-9df3-1d9bba181ccb", "value": "T164F6336BA03AE6041CB0C6FD71709546C53EA4C7CE4E1A5A96DDF9DEBF04421EB86C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560963, "uuid": "38d00260-5728-4d2e-92ed-00bd6ec9407d", "value": "393216:fQ3zIo/UadQcXmwPmOOVSZDf4xoHItB+cqSiUf+Z:fQ3zIoc8DmwujAZcKItYrSisM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719560963, "uuid": "c244821c-a152-493c-8807-9ef33edbc0c7", "value": 16317329, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719560963, "uuid": "839a98b0-89a6-4017-8124-f3d5c7fde670", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e6c6952-3523-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719561069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561069, "uuid": "9bb2620b-c44a-4947-b797-5692e7822292", "comment": "Malware payload", "value": "c625ce67c7f20f085ce5eed2c98cb545", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561069, "uuid": "c5bf5a7e-5cc6-41ea-9600-1083b084c9f9", "comment": "Malware payload", "value": "e13561fdb2fc83a2fadf2b3046422f3cbc6070ad5f70dfff2af86364ab0a7437", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561069, "uuid": "b4b507a8-e925-476f-b0d7-54c4da1a652d", "value": "T177B53354ECE38DC3454A5E6E7F46F46EE1E77DFCBE12A811814C8A0195860D88EBCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561069, "uuid": "c075d5c3-0567-459e-bb06-d512082ac227", "value": "49152:T0IMUlaxHKftRUUMSP/DymfvgUDssgX3oZUvPvFR6jQA5Oz:T3DaZO3xPbym3TDsVIK9UsUa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719561069, "uuid": "76d72441-f94c-4847-94dd-44b5dbf6deda", "value": 2425864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561069, "uuid": "fd4774b4-98db-4457-905b-724936872833", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fee127b-3523-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719561071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561071, "uuid": "b26189d4-6575-4dbb-841c-fddccfef04a8", "comment": "Malware payload", "value": "0f478607a46ff351d2522e40c1f142f6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561071, "uuid": "b1d0da5b-7443-4e69-ad53-e972cd015874", "comment": "Malware payload", "value": "89fdc38367edc8f20a5e1ede123b13c11ff605c8251baa6d897a022c6e15e965", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561071, "uuid": "4416ff71-3c7b-4912-a061-af7fc2c1a5c4", "value": "T118B5339A668692A9808340DCCDFC7EF7D98AE7669F1D1C329CC120D425DE4B6F0D53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561071, "uuid": "0141c473-7aef-431a-9225-22181d893db7", "value": "49152:XGpSskQwhqhCykZW7eclrcDKdtJikF9nl28WrepvTLOM:XEDwUhC7ZGeogDCtIuw8cGD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719561071, "uuid": "c47089a7-aa4d-42a9-bba8-ca17093e8030", "value": 2424840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561071, "uuid": "128a016f-c395-491e-aecc-cf5a1c8b817f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a01319-3523-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719561077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561077, "uuid": "0c741ae8-1ff6-4f8d-b7c6-0dfbd5bf03c2", "comment": "Malware payload", "value": "1ff55e54858317b356f68581871f78d7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561077, "uuid": "bda95f4f-1bce-4598-adeb-1f57c780f143", "comment": "Malware payload", "value": "eb7f1806c5fd811b527a27f0df3db7da20bec4225eb0f8d5419daf330afd7b26", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561077, "uuid": "ccabcd3d-04c1-4d64-aaa9-e541aab55ef0", "value": "T177B533406392C47322C5EB9C28E1C0B1E93CD78EBD14BA154817A5AE5BD8AFC4E5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561077, "uuid": "8e17b7e1-e128-4d6f-8bbe-99b6a2295644", "value": "49152:yorYIlK7MBfmx7GgCghp7NoPEejCx972RcjlbOfxdNuSkYzAw7Ugf:7rZ7mxig16PJCL72mjlbOfTj8w7bf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719561077, "uuid": "26efa135-b758-47d5-b807-b74374de64ec", "value": 2425864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561077, "uuid": "bb1e8541-1a92-4d58-a80f-4ca9f21524f5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "755c1386-3523-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719561188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561188, "uuid": "b7e07c58-7cf1-49fb-accd-fcf09efaee12", "comment": "Malware payload", "value": "7034f0621dd09fcaced30a72a608d48d", "object_relation": "md5", "Tag": [ { "name": "jaik", "colour": "#b14a17", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561188, "uuid": "6ebe7bf3-9d0a-4831-b810-9a694f475c2c", "comment": "Malware payload", "value": "30cca8eff9a77d856b6ed35c404871f8e1021eb8751ecf738669317297b31864", "object_relation": "sha256", "Tag": [ { "name": "jaik", "colour": "#b14a17", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561188, "uuid": "d5830155-5e6b-4c9e-b73e-5a62d8510153", "value": "T14D8533ED88F41D73D6331473A9FA5DD8A0812688E5B05D2100F67F794AA428F7BD4B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561188, "uuid": "2de67a7c-fe76-42e3-beb7-7564a9135175", "value": "2e5467cba76f44a088d39f78c5e807b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561188, "uuid": "7054ef61-d9d1-4b62-8d61-5ad6431a5bba", "value": "49152:pI2pz5FicjIOcjC3nJn521DK0Cw12lZ8o:i2h5F18OwGN812Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719561188, "uuid": "cc78e4b5-7550-468a-b013-134b1a330a4b", "value": 1831936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561188, "uuid": "dd6f6f34-3cd3-4cc3-8445-d7043e13192f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4e63ffd-3525-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719562234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562234, "uuid": "5733bafa-1769-4198-89c6-c1b284f15ea8", "comment": "Malware payload", "value": "f62bfcc8cf24307dd1479e202b9be5e6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562234, "uuid": "9c645a55-680c-4c62-96d0-64bce4933e76", "comment": "Malware payload", "value": "181f153cca83043941c3dafc780422e0208a6daf5af5ccc96e62ad2a708f899c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562234, "uuid": "b546a316-2402-4533-949d-49fb5610b359", "value": "T1973633471CD514EBE8CCA8B9841189EE79F56E296521CD4EC277C3CACEEB5D8F4B21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562234, "uuid": "5f1d3a53-4ab4-4efe-8b40-933034cfcc4a", "value": "6602214a09b1ca995b85d5ca07c13624", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562234, "uuid": "8453a337-efbf-4353-afe1-5b8016c9fac5", "value": "98304:vEJpn+XR+aIugypy4fShV6Zrw6MVj80J8ZLZ4XndKnkC7/t0c:ucRvpKhAZc6MVQ5d4X0nk0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719562234, "uuid": "3bbaf7ef-3a6f-4e79-94a8-57bd7a129592", "value": 4984832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562234, "uuid": "b22c92e5-8372-450c-be30-acd44235d2b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "183f44b1-3527-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1719562749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562749, "uuid": "6f1ec000-f00e-4044-ab57-9127cd376eb5", "comment": "Malware payload (RemcosRAT)", "value": "1e0e3725fc2ce530cbb78f29eafc2a70", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562749, "uuid": "64fff076-e839-4367-86f2-077a2e7404dc", "comment": "Malware payload (RemcosRAT)", "value": "05c9d95da6ed62d264683f34a2e669e33f98532dc73f0d926a98b8e175d3b924", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562749, "uuid": "ea23060a-506f-436d-87a2-8e816dd0c51a", "value": "T1BAE4B0B99299AC9F0E1D0D62F408174A5C6C44D7F678D2F87E82B4F886961A04FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562749, "uuid": "0eae26c0-cb51-4565-a033-ae0c214cb020", "value": "12288:a4yfhLWw+hRizqo36P+F9QFojBXC2slenIFHrg+j3VSB:NAJMszqoKP3ojBXC2ienIFLNjla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719562749, "uuid": "c72ccb04-63f6-46ff-a53c-f66768aa3c34", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562749, "uuid": "762eb7d6-05e3-4168-8f6b-8b41ca5716ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c87a393-3527-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719562757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562757, "uuid": "cf8b9131-43bd-4fca-914f-f51a3ca201c5", "comment": "Malware payload", "value": "66bddfb2d70d78036386210e128723b2", "object_relation": "md5", "Tag": [ { "name": "infected-wordpress?", "colour": "#1d69bc", "exportable": true, "hide_tag": false }, { "name": "vdf.file", "colour": "#f83315", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562757, "uuid": "d14f5826-0cd5-4770-ae0d-c141e239ca80", "comment": "Malware payload", "value": "5648adf168bad0eb2a592f9261dc36665b0a87017f338357b056027304a8882e", "object_relation": "sha256", "Tag": [ { "name": "infected-wordpress?", "colour": "#1d69bc", "exportable": true, "hide_tag": false }, { "name": "vdf.file", "colour": "#f83315", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562757, "uuid": "50fc5916-eac2-4ce6-acbe-b15770274392", "value": "T1E3565CF8A1AB85D1F8079DC16578BEC7073235B3CED80824232D7A484FBA9597A49D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562757, "uuid": "3911c40c-dfca-49c6-adfa-ac3781d83d90", "value": "24576:/hQd+L+B4HtxNWct3i8lpCHSUKdvPGyVx3IVpPS3KzbPsbt2trU6gWQ8jeN0NSJ7:1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719562757, "uuid": "be6797a0-c4bd-4170-af07-6054d12f829f", "value": 6080512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562757, "uuid": "3b7176e9-0289-4f2f-b5b6-b266f2e219fe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3569b0ff-3528-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719563228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563228, "uuid": "ded6e8db-9a56-4d15-9fc1-2dbadaad73e7", "comment": "Malware payload", "value": "6c502f63642761f32b454d1eedee5ee3", "object_relation": "md5", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563228, "uuid": "d6772f5f-ec04-40b7-bcd3-6e253c615c41", "comment": "Malware payload", "value": "8c794dd435d44feac82bb08b9f6fb9c95b71c5f1fe4762da37f49d0b6ed21be7", "object_relation": "sha256", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563228, "uuid": "875a6d3f-8b62-48f4-ba68-ce8a73f29dce", "value": "T1C704BA6EE34F0554DF59977B034A4A4A06FCB33DB38540B139ACA77437AD82E4A628", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563228, "uuid": "b9dcd86f-7e27-4dd6-bf6b-bfd2ddc58a77", "value": "3072:skaCuSLba+uNtDrJk4ZDEafetXJnivruV:su/GT5k4ZDEafetXlCuV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563228, "uuid": "ed9a52a8-b300-43f6-b18d-caf6ed10eb79", "value": 176708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563228, "uuid": "f1ef4f4e-7fd4-4b80-9f78-8272bba9e54a", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58bd473b-3528-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1719563287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563287, "uuid": "770f49fc-284d-49cb-9cd3-ae6d94bc6265", "comment": "Malware payload (Stealc)", "value": "0f8b01fce87324b3c2e7fa5964ae96cf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563287, "uuid": "b5805c15-9e9d-429a-9f17-f3379d657403", "comment": "Malware payload (Stealc)", "value": "420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563287, "uuid": "dd23197a-fc80-4858-997e-8536bc2cf764", "value": "T184C53312F856DDADC59F3C329FCDEA851811E9FC787EAE48BD4056C8C51A0D22DE21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563287, "uuid": "64e6417e-4b69-4233-b627-6cd6fbec499d", "value": "001806c33a6e9fe5fbff34bdbd79b591", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563287, "uuid": "62fa35ea-8c4a-436d-80ed-d0715fa93a96", "value": "49152:AKbOKWc0NUys723omzuVp7UxIZ3OxIQPdir6yfCVCDuIHZV+/F93p+o0HGDEn:A3E0NUyM2pzuT7UxIZ3O/PdiWyqMDhHx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563287, "uuid": "c1ed96ec-76e8-4b92-b7a6-374607358c64", "value": 2502656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563287, "uuid": "077c039b-2620-4155-a835-cfd7e8917a87", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f0b65d4-3528-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719563298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563298, "uuid": "e231dab2-56d2-4609-b9cd-ab04218b8bb4", "comment": "Malware payload", "value": "a9650485ffbac4341f8b4bd1c486154b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563298, "uuid": "9ad540b9-36f8-40f9-8b12-0b8d4e608b2d", "comment": "Malware payload", "value": "95002793e089ee5669bd46b09389d3157e710b580e23cb468d2e1cf72edd0376", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563298, "uuid": "7bc32f2b-0b8c-46f5-bfbc-4973f522f847", "value": "T149159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563298, "uuid": "a89b330e-b443-4c86-8473-ec1f557472c3", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563298, "uuid": "7700d45f-8755-4049-8f0d-e87087fdf846", "value": "12288:OqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaMT7:OqDEvCTbMWu7rQYlBQcBiT6rprG8ac7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563298, "uuid": "424f0b19-4195-4909-8e8b-9071a5067157", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563298, "uuid": "90636fe6-67ec-4a99-b11e-caa47364065f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cd7d51e-3528-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1719563348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563348, "uuid": "c2dab47d-195f-4132-bdd5-a6733ba792b4", "comment": "Malware payload (AgentTesla)", "value": "48a004ff4a08d3314431b78ff2adbfdc", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563348, "uuid": "9d6238f0-3d7f-4fe0-be7a-f591244f6e91", "comment": "Malware payload (AgentTesla)", "value": "e26e65224caa7856e1dbefb47fea82365877084939cf3d196b299dfd2558b45a", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563348, "uuid": "49e3cd24-cc35-4d23-a63c-21b06126375f", "value": "T18E6476FA6037ED8AC7370A80D1043F179C29DEDF6A7847F8768815D1C29C68C99E65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563348, "uuid": "7093d0f7-5439-4a0c-a5c7-684ae217e5cc", "value": "3072:YtLD1tE0woJSeHaTDpyfZZMsEPuBaWevwQZWT6qlkfDGQjo8S/pveD2JaR5vhx5n:wtwhpSDBqYQX9DUHhcLYmx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563348, "uuid": "ee301a27-433c-42e2-b8a2-868d4a9920a0", "value": 325632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563348, "uuid": "86563fa1-df2f-4789-aac7-55fbb87e37ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dde5683a-3528-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719563510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563510, "uuid": "f6901bc8-e9d0-4582-8d1e-0813049be0b1", "comment": "Malware payload", "value": "7ffa9d51763bdeae618760cbb2b88fda", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563510, "uuid": "897c9c4c-7759-4b42-9e19-13e741c70445", "comment": "Malware payload", "value": "0bb951cea057e86ec91f07160272f416128ca824291fe3bee6628fa57e36d70c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563510, "uuid": "a1593490-a091-43db-8135-2cd19b4f0f62", "value": "T1E795336A2DC301E8ED98973CF946351F8CB0741B908252A926E187A5BF691DFC703C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563510, "uuid": "114f108a-47a0-461c-87f1-8e7cd5aa3a9e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563510, "uuid": "e7f8306b-a0ac-4be1-955d-42d649fcc9b7", "value": "49152:oWkAR74TVv5bu2pGFXmSZ2FGUhUIukBjI/k3PMOo:R6Tt5bu2wtmHhUIuk1I/cML", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563510, "uuid": "52a946c0-d157-4516-b959-d55cb4642f15", "value": 1940992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563510, "uuid": "2f22ec5b-b285-4a94-8949-5b7a5d65a79e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb381062-3528-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719563533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563533, "uuid": "e53ea638-7fbf-49d7-bf3b-01ca229e7d68", "comment": "Malware payload", "value": "0507c209a16e4a51c86387ea7e74a38b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563533, "uuid": "5c700793-c92f-4767-9de4-d5176f0b0655", "comment": "Malware payload", "value": "ec464816890347a05f330b564d421c4df265ea543d7998d16001343675e8c49c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563533, "uuid": "f77209b7-5007-4a0e-b056-65e723e74228", "value": "T134B5330356D26072D60916B68F3DAC0129F164A4EBE9553A1F2CF07CF83138B9756E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563533, "uuid": "0ec8bb44-3a21-4aff-9131-a1016ecf7b0c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563533, "uuid": "e715d9fa-e6d3-42eb-aaf2-3ff1cacf15da", "value": "49152:W8CquDJPbrHGEEkIjzf1HyTvpTFH8j6PFGxQkVmNaey41pK+6kR:7nuFjrHGE8NyxcFxQvsejpfb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563533, "uuid": "afe8e4b0-2a13-4ca9-8d39-6f16c6a53e56", "value": 2360832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563533, "uuid": "1c73625a-c052-4729-8e53-dc69f248e8e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81dd567-3529-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Loki)", "timestamp": 1719563877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563877, "uuid": "bdfe3a9a-45a1-436b-8a44-0caf60a0b976", "comment": "Malware payload (Loki)", "value": "9e3578db5336e49facb772d30d844b6f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563877, "uuid": "2f1fd729-abd5-4c20-81b1-61242ab8381d", "comment": "Malware payload (Loki)", "value": "562f0bcc88b30a19f309f2cec7288ef29faa53d2b9d33a52f964f2e3b09324e5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563877, "uuid": "9c0f858a-c548-4b9b-ab11-e169dfa13f59", "value": "T198C4020077A96C4AEFBA4DB74853504002BC94716E03D2D42ECAB1EE164FFED4A97B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563877, "uuid": "8712005b-c3ea-4004-aa86-17689ee377f4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563877, "uuid": "8c098863-b6b6-4bf1-af90-bff4f84a203e", "value": "12288:zij+2dbCawDKSpZMKR7IJK316ejb/mg3L6DLwuHDnORLy1kR:3gwmOZMw76ejb/71KDn8OI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719563877, "uuid": "52c652e4-419b-43ed-8590-952e4f951350", "value": 569352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719563877, "uuid": "a32106ef-5f8d-4d3c-9d48-e3a898758918", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a75a313d-3532-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719567714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567714, "uuid": "35cca8dd-8d6c-4e25-9349-52133897da8e", "comment": "Malware payload", "value": "3d9aff588783bfc7063db5985c8d5ae8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567714, "uuid": "1c694d30-dee3-45e4-afba-be57f29434f1", "comment": "Malware payload", "value": "5700e2c386c5789216291cb50dafd56dd5d2952036e6cfc4754e08f3dd53a7d5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719567714, "uuid": "027024e5-c197-49ca-aaec-641d5aadb644", "value": "T19B363350C37A6076DE05DBB090B78A3CAEE9702C4D613A6E20A71563DDB7398A47BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719567714, "uuid": "451b9273-1943-4154-9c50-2604122eaa37", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719567714, "uuid": "6ff5c036-1a34-420d-a68b-d87622e6c95a", "value": "98304:CKJhiX0mn4RudNEBNbNlnHPs+88f+M7Uir2j2ac6P23QxP1:ViE68Z8s+7ioZcMcQ91", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719567714, "uuid": "60797292-209a-4533-aa8b-1c6c6695f0aa", "value": 5318861, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719567714, "uuid": "dc63791f-81df-4713-b0ce-ad320783a112", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e3a2e77-3534-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719568397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568397, "uuid": "4d7f92fe-034c-40ac-9194-7bc8681379df", "comment": "Malware payload (Amadey)", "value": "03a449adc46c773f908b43ec94d2bbe6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568397, "uuid": "bc991118-190e-4687-92b9-7eb6696018fb", "comment": "Malware payload (Amadey)", "value": "a529777e9d9f43756e3df649074edfad71e0e676720e3030e3dfea6d931c6a37", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568397, "uuid": "76270a02-f399-4dbb-8513-26c8e0dce1d0", "value": "T16795335CED02B6A9ED6CF83B98579529FE7C40AE43D6D9877682B935DC8B2007CD08", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568397, "uuid": "a4648fb3-0441-47f4-963b-2d9b45103f4c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568397, "uuid": "3d25c538-13ad-4e21-8eec-3f01d9dd702c", "value": "49152:Ln2O4WjHXCc7c2cPaLlr6C7G9FPnsIvI/tXvndme:Ln2O443Cc7c2ZF6aGPnsR/D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719568397, "uuid": "ac4c7502-645f-4c6d-ae69-2add4c782f70", "value": 1907712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568397, "uuid": "20fafbb6-8877-4940-a0e0-d4ff4bf0db47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b627d008-3534-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719568598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568598, "uuid": "ef6adbf0-fdc9-48fc-9a5f-848671b6da86", "comment": "Malware payload", "value": "932ca099c551bb5dbb1bd48ccfed1efa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568598, "uuid": "16980a26-b03f-4ef1-8427-b19ed2df3b4a", "comment": "Malware payload", "value": "65bc84a13a91018d785555cd5e28256aa969e26a2220357a43bd178ff1dd6ffe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568598, "uuid": "25bcfd3b-0690-4e43-8918-d956b25169a3", "value": "T1BD159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568598, "uuid": "35bd8751-4bbb-45e5-9b50-0e46c5b71c6b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568598, "uuid": "6ef315bd-b2f6-49f3-bccb-225006a89a4f", "value": "12288:OqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T5:OqDEvCTbMWu7rQYlBQcBiT6rprG8aA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719568598, "uuid": "5ff249a7-c152-49c1-91fd-e64f8316065d", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568598, "uuid": "964a394e-0ac5-4eb8-b7cb-9a07a4fd7da0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca138268-3534-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719568631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568631, "uuid": "2b3d95ef-148c-4052-8c5d-084e949f9c98", "comment": "Malware payload", "value": "4b12d18a2fa1a9df68bcac01eff7c62f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568631, "uuid": "a79b23c5-ca40-45b0-8721-40d7772ef311", "comment": "Malware payload", "value": "2be47c4ac757a8f2dc3d790d2b36afd822c94d8bd72810026d399fbc10d3d6d6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568631, "uuid": "7c0b6edc-9865-47d1-8495-3c38c25e7ffa", "value": "T1B4B533920DA1DC52DE2AA271C0300ED0C5A4F8F89FDD3B569696C57F793278BE8716", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568631, "uuid": "bbbcbdfe-ad8b-4578-b089-d0599313fc4f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568631, "uuid": "def83bb3-209d-4dec-9ee0-887dbbd049b0", "value": "49152:g/6/dmgXvoY75zKGQsmMGzYD+4J8sZriIpi2HCO3CQGR:g/6/dmgQY74G9mpYD9DCOSQG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719568631, "uuid": "fa2bebd6-46bf-400f-b78e-ac2a1332f4db", "value": 2357760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719568631, "uuid": "0b344b58-0721-4a64-a33c-fc1f09bfce34", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e44a9aca-3536-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719569534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569534, "uuid": "132caf71-03f3-45d4-bd3b-070339545016", "comment": "Malware payload (GCleaner)", "value": "2739ff6f4689a4bfc2b0ad5d756456c8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569534, "uuid": "2e8e83e7-d263-4527-ac75-6e4541e7a4b6", "comment": "Malware payload (GCleaner)", "value": "a547e3e4c8c55da78ae090e87503c8e9fd60f308957d383c3cae5efea45e7a71", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719569534, "uuid": "924dc389-8cf5-4c87-8e24-b7889834951b", "value": "T1A874385276F37912EFB78B345F3D96DC273F78626D30828A21042E6E09796E1C9177", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719569534, "uuid": "a7233f83-c708-4908-9888-74dc9a83f245", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719569534, "uuid": "99d24004-eb4d-44a6-82f2-eba57ca310ba", "value": "3072:b5ICLe18u51dq5N1GNTVzV7BkzxN/5bqbbEGUnis8DYRBuSa5rx7R5lfGx30SEsc:NLe1y0xNV7ePbMBk2YDu951tf2kz5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719569534, "uuid": "37cfb118-a6db-4381-aa31-ca6ae18d882b", "value": 340480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719569534, "uuid": "0c970d5c-9452-4e5d-9485-f4712635b549", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1c8d3d1-3538-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719570308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570308, "uuid": "e803ee34-b9c1-44de-9248-612ee52b910c", "comment": "Malware payload (Mirai)", "value": "1afbb7e85151a80a499b8feb617be367", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570308, "uuid": "7a32eda1-5905-4bf5-8b66-ca44ea2be925", "comment": "Malware payload (Mirai)", "value": "59a36fbf090453b374b43875e47d415bbe959ac79f436e04e1287d4d169cf8f0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "d7c51300-5c2e-4620-8f62-da7254b702c9", "value": "T1D9F2854E7F155FBCFFE5867C86F79E10925423721392C48AE1ACEE410D24319B41BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "30352609-b719-4e4a-a313-d74a145318fc", "value": "768:vCjIXpwPW+gqw/B5Dw+CXCYU8rFrhdVZDwXhqzmD:v66dCX1FrdVZDwXhqzmD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719570308, "uuid": "7e9d774c-71d9-49f9-aa38-14afc61edf88", "value": 35696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "361908db-0859-4d0b-91ae-747c12a015c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "5702bc86-8735-4a46-9474-19821b907e48", "value": "t1b601dc306f3061199ac3dab89cee4361542882174609df37ce3081cc642e0ade31fc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1d03071-3538-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719570308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570308, "uuid": "f21f8d12-82c7-4d84-af42-e1b7df7894ac", "comment": "Malware payload (Mirai)", "value": "6488f2bf637aadde505c6b79ee15484c", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570308, "uuid": "2e5d2708-3c05-41a2-a3d0-d169ada282ff", "comment": "Malware payload (Mirai)", "value": "78b2805c7039c52c57ade72b6fa135f670dea5803e7a04164e8eb18221ad7199", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "eda5e745-84a3-4fd4-b7cb-ac312a0a55f1", "value": "T1B3B218DBE4B3CCB6E86441348D12E6726E36A019BF0DEF57F3ECE502A8917909417B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "37f80f58-1835-4241-a00a-7d982131eba1", "value": "384:ftaE4vaeXYS3i/Ak1Sceqb2S8TwrdgMD5n8n9sx/3/d8moRLXY78V8pas1A35AVF:wEiYgWhoS8MpgMd8n94vVT4LI4V8pXCS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719570308, "uuid": "eb0d5e20-65ca-4e61-8788-ea8daf04b8e4", "value": 24080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "71b0a097-b06d-4fff-a31c-a4712388d268", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719570308, "uuid": "c51d7f31-1ea6-40ce-a40b-f483268e6e1d", "value": "t16ce02600bc658a288cdb9a749dad07b49901621365668b14cf10dbf0883f458e70ca", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81c83380-353b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "f97953c7-ca72-4739-9ec2-c40e21f57fed", "comment": "Malware payload", "value": "a3e03ec70894230f91bb2560b29d4829", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "ebb55982-0c9d-4f75-8f54-a37e971effe2", "comment": "Malware payload", "value": "bcbd84d128a6a15e9b6a3c2affc25451bdfc855f6d51f5f18f31fe5a65111f1e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "e7e0964f-e389-4777-a107-3733359a2dbd", "value": "T1683412D2CC8089DE3C0BF2A09C9D93B1E3D1B4F49B06E69A9C8C55F53F571ACA1E64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "b7047395-acb2-415d-b8a5-1f9c6236aee1", "value": "6144:EjNA5xiqi8cdiV7WSrgq/Pip0/TCAxIsRRHO0q:E6h7WSEBCasRRHvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571516, "uuid": "cccbb704-dd53-4072-b137-641d1c9913f4", "value": 242240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "4499f998-79a9-4c02-a24a-fdeb40fa41d1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81d10371-353b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "49ebb9ed-ba40-4c71-908f-323eb1d63db4", "comment": "Malware payload", "value": "8053cce1bee5dbc54d5ca465a2c20161", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "1321e795-132e-47ab-8680-7a52d966ec4e", "comment": "Malware payload", "value": "1f6c85ff21227814935833009bc3c868d51d765b944cddb3d10883c2da6ec36f", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "252735b9-a6d4-4600-a5b1-0835d9dc10bf", "value": "T1F4341214213F66593E1F91EC003F5FCA89E387A82AE6AD25D7DD9E8F4154BC21EB44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "acb8cb02-13d7-4830-ae73-dd43c08855c4", "value": "6144:Gy8CSPnWN+fYrCQTcSuKla+J7ETC3K+O8dhzWshi:TqPnWN+FG++orVUm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571516, "uuid": "93df5df7-a95a-4b1d-bf39-a1f9ba253f30", "value": 242240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "b6e7009c-e7d4-40b2-9895-fe020d5c62ba", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81d3d604-353b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "fa38cf0b-6c05-407c-b0b5-a2f940d09569", "comment": "Malware payload", "value": "617ed8d596c4a8e1554d7e7888403e94", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "b0cbd679-b38e-4139-9deb-98cb81e2d1c0", "comment": "Malware payload", "value": "31b7a984f9d30c5cd17263efa0464fa1be9db5450b4fa5eb69f8c3e6aaf63e9f", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "117a1c96-08d5-4058-a56e-3242da1c1bfc", "value": "T19B3412CF0A6A2D99E925D14B493365F509432E4C04BBF960B43A30EDBB7E5BC4427B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "b4633e15-7a25-4be2-83d7-de8f142245a1", "value": "3072:GQhGhnj7b2zNSx/zqlCApuwyUJHGsJnbVWh/Bdy//VIKEvbKCtcWi4wKBM4Vyr:G5HFtAZhLfxb8HIH6KEveeiT4Mkyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571516, "uuid": "5dacb12a-ceb2-413e-9731-ae05915091af", "value": 242240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571516, "uuid": "068da187-19d2-411a-a30f-c9383daad8f3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6385910b-353c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719571895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571895, "uuid": "8885ae47-0579-474d-964a-0e7afd46eebe", "comment": "Malware payload", "value": "43e424449fe2e7062554204e3be4856f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571895, "uuid": "b552c0cb-2532-45c5-8189-7d8f88dab05f", "comment": "Malware payload", "value": "5471cba1a5a8f9633cbb89f8a845a5c3a49c8ac5932c3a884c459cf58345e3d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571895, "uuid": "767fb2f1-da3e-4506-a2c9-77b1c05a2436", "value": "T1A3159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571895, "uuid": "f2d6917d-182e-443c-9e41-54dd92ec9f31", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571895, "uuid": "9896a0d1-dcbd-4874-a632-f35f0e4a279b", "value": "12288:hqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TD:hqDEvCTbMWu7rQYlBQcBiT6rprG8aAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571895, "uuid": "f9691ce2-f414-4893-8fd4-fc7dee607b20", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571895, "uuid": "064424e9-539a-4948-8857-c44897d437a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d25918-353c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719571896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571896, "uuid": "64e31c8d-c8be-40a0-92cb-4a8efc695d89", "comment": "Malware payload (Amadey)", "value": "d9ed33d1c80adaf29b8c2a8a14731b07", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571896, "uuid": "f65a1d65-8e95-4f3a-9dde-4a9a167584cd", "comment": "Malware payload (Amadey)", "value": "b261759d98b0fe7f3fd94be8862f19bea2eda291a75d371d1564a8cedd12921c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571896, "uuid": "a010156e-3bab-4020-84ae-b3fdf1014e53", "value": "T162953351B87B7968C5AA4B315197EA08FF601B6302EA8F583B54194E8D3FF18F7028", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571896, "uuid": "49f95daf-7d3d-4ce9-859e-a859c01ee607", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571896, "uuid": "21ba79ef-def7-4ae1-96a6-2123c5ea1784", "value": "24576:BynzkwhRYnh7x4g/h+mXY1crqM5Nd/PDkbRWAl4UGEmZpQSpRCoMLUpLzTaEDV6:BfwvYnFx7/hJq+HDMh4UfmZOSp4k3rD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719571896, "uuid": "e1ac5ceb-e622-414a-aa07-f250306157d5", "value": 1886720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571896, "uuid": "606e8ca3-1888-4c2d-85bf-024de60e407b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3bf1fc4-353c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572057, "uuid": "f650fbc9-3b2e-422e-9288-6a1313c423ec", "comment": "Malware payload", "value": "ef95411945330db1907508d38bc373ac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572057, "uuid": "d00db8ae-b957-41d6-850c-847443c43071", "comment": "Malware payload", "value": "114b868f319162c5d6ff92796e41910f54de0e89f895a066fd4980c6dba2e323", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572057, "uuid": "d851390c-de60-4d2c-af81-3250c86b8bd9", "value": "T1F355380A6B3B4A98D515C87ED2372263D5297C1CE0287877CEC05A027F63F61A57A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572057, "uuid": "0b5d6fef-77da-4d5f-be37-d3307e0c7e19", "value": "fcc1e1d34891ecf13d7f9f0c91e336ef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572057, "uuid": "c050ad47-7a11-4fe0-b65d-f4f2bd6351c4", "value": "24576:snz6dSHy7DXstIVWn4etKUBYWPezgW8Ns:8zf5N4qKUGWP9W8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572057, "uuid": "80d24ae4-2440-4d3d-a060-0d65f3370d57", "value": 1281536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572057, "uuid": "94dd5822-f8ac-4af0-af2f-eb84b5ce7b62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07f535ac-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572171, "uuid": "57451a1a-647d-4f33-a6ee-64279bcf702e", "comment": "Malware payload", "value": "2397221fbf530231874b24bc24f13246", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572171, "uuid": "59276bb6-5d82-46a6-8a2d-8084b9b77b93", "comment": "Malware payload", "value": "99df7ae22cab43376a7ed2d894db9f28f0343cd5b645daa6967be2a17af4fba5", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572171, "uuid": "d2dedf40-b82e-4e58-8a8f-964328296c4b", "value": "T1D036239BF7C6EA57E8F6D73B533485AB452A8C50CB07D36B0514B27C08B76C08E91A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572171, "uuid": "526ff88b-9707-4f7c-9185-56df53b81d2a", "value": "98304:3V4LQPQrN81u98ewrEvWplDEerR2kx1+KI3sOH93UJKR:3V4LQ4rNYc8JpBnjCsOHpbR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572171, "uuid": "3a3c595e-399e-4560-a556-825d015102eb", "value": 5124266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572171, "uuid": "694a0c31-ad1a-4fac-af36-91f0550a5414", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0991c7fb-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572174, "uuid": "24c8d3d1-4383-4a88-86ac-ec45069344dd", "comment": "Malware payload", "value": "9b9aff7cc7a38b50247ce74fc1ed890d", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572174, "uuid": "8efc4eaa-6045-4bef-b269-960717a883f6", "comment": "Malware payload", "value": "6953c022c1457028c2e02b2ed5539eed39ef033e5becad0d57e75e7f84654a6f", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572174, "uuid": "2093e625-a72a-4a4a-b703-31de150c93e4", "value": "T1AF762351F3C6591EFCF397398B7AD2AA4107AD918B43E3874906727C1DBB5C08E68E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572174, "uuid": "90d58bf2-349f-4842-9ebd-08176bdba7e4", "value": "98304:Q19Fl9guGOqZhAykLubkc+RZ+1cytjE89nvCTO+mRwIL6o05G6fkaS7NTRduuJnh:Q1RqOVY23X8ZCTOoBvfz6N3JnMChbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572174, "uuid": "4b042115-a013-4a04-a476-61354f04a712", "value": 7473500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572174, "uuid": "ef3bcae7-3e5a-490f-9ea7-70523dbaee7a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c10012e-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719573631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573631, "uuid": "9582633f-6ac3-4bc9-aec7-81bb3c96c304", "comment": "Malware payload", "value": "d06913fbee09bdfe1bb7cbb2b392c798", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573631, "uuid": "6d438d44-5e70-4fec-8fa9-a48f819d02f3", "comment": "Malware payload", "value": "e6f31f77a9e4ca9640688081b639faaf388e26d6cca5779f05ac5823ed58c8e8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573631, "uuid": "9205b603-aec6-48f7-a41a-3cc139de83ce", "value": "T18EB5331887C28CF1E61DD2B0E12BCCD80AE47812EED52FFE0351F7366C95B7664AA9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573631, "uuid": "bd9d588f-f819-442d-8b09-9366f42e74fd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573631, "uuid": "9947866c-d7c6-47e6-89b4-e7d68493c4dc", "value": "49152:ZOC4iuI0MHyCRKsvOqoOuVDZ+bpBgNGOeOq068eNtGeZFLEKpZIYtB0Ck:ZOC4iuI0B9GVBgNGONiFikxEyb0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573631, "uuid": "a1832e4a-cf7c-488d-a6aa-d1e07a40bf3d", "value": 2363904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573631, "uuid": "c93f7f19-5366-446b-9d75-a7ed3339a050", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28a7394f-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572226, "uuid": "858f61ec-b755-4e1a-97d5-0ddb1335fb4c", "comment": "Malware payload", "value": "77f8aaaff4073897abf6966db1814ac2", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572226, "uuid": "244ae617-5032-4b41-af59-397141fec359", "comment": "Malware payload", "value": "638607ff7c876e94d154993a66570a5cc8f8c0379be1dcb90d89916d897ee5bf", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572226, "uuid": "1c7b42d9-e5a9-40e3-81f3-6308b2390128", "value": "T1C184695E2E5FAD161B31FB6805ED058643C3DD384C2787895CBF030BE95A6C2E8963", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572226, "uuid": "2065d556-9696-471f-b966-91c1a3d891cc", "value": "6144:Ba4Qu2Yn9QCRJwnvA5+w/bGHuzw+3BVnlBiQmDvfOJtyIFNMvIVS:Bu8nGUwnvCwHudjlNmDv2JtyIjMvwS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572226, "uuid": "55fce5de-b1c8-4ca9-a745-7b2290bdbb76", "value": 396632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572226, "uuid": "c07705ca-abff-4fe5-8e35-f17a5a5756e9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cd44bfb-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1719572287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "6aabdca0-d172-4b06-9c35-2f18eb622ea2", "comment": "Malware payload (AsyncRAT)", "value": "dedb302aba9b69536c287633fbe41f5d", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "e98b0aab-9e16-4324-a163-62c0a6fada9d", "comment": "Malware payload (AsyncRAT)", "value": "873357eeca6b2391ccb682fa669d5177ed8afc27cf7a25ec7dfd09d4d2bf9c64", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "37bfcc64-fdf6-4d5e-9778-34ecb04f20db", "value": "T1B3034C087BE44225C9FE6FFA3AB375020770E6075A13E74E48D5896A6B77FC089007", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "4568db14-f058-4c9e-8951-f2e541218e73", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "0ceedd42-88d5-4664-9bbe-39244165aa56", "value": "768:Dcq50224u+jTmerM6tQ6B7xTFU9k2UOMhbbj:Dcqm224P2eOg7NFU9krOM1/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572287, "uuid": "9e6ea27a-6632-4776-a6b5-189e6c899000", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "26545196-fced-4ef5-94a6-3189c6765cb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ce17c16-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "41e1fdf5-8ad8-4bc5-a030-7910800bb0b1", "comment": "Malware payload", "value": "da49bbe37855af62a6a8809453d17b83", "object_relation": "md5", "Tag": [ { "name": "PDF", "colour": "#25ce58", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "4cc0ceea-f69c-4aa6-bcfe-62fb8f89db5d", "comment": "Malware payload", "value": "229defbb0cee6f02673a5cde290d0673e75a0dc31cec43989c8ab2a4eca7e1bb", "object_relation": "sha256", "Tag": [ { "name": "PDF", "colour": "#25ce58", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "dd138b89-de05-4fce-84ec-349a06a42460", "value": "T1EA829E25D6440C6EF806A501873E79EE4BBDB27336C865C21C3D9E0AC591554F8F3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "5193c754-2662-4f2f-bed4-c2c8a995562e", "value": "384:yR+GaFCBHN82KGuaUdm60hX98cTJlDxOv3U8+LI4Kiikj2QQr8xnD:++GactEEUOxT1QU8+k4JjE81", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572287, "uuid": "e6df0fc7-f6af-4c76-8426-b20905dd3bf6", "value": 18810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "8244cf62-5a8f-4558-bffe-8483f1deda53", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cf991a3-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1719572287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "d7e7dc4e-46de-4466-a6e1-52ebf944de39", "comment": "Malware payload (VenomRAT)", "value": "76e8d35fe35dce2fb65d0e2fb1be067c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "04fa0b9c-66ab-4143-9a13-fd19bca9e999", "comment": "Malware payload (VenomRAT)", "value": "9c75c0e33bb81cadd1659deef9302106b7f2358cd8ea613e6e8b76f41e60ba8a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "974db54a-5a43-4e79-b6c1-351dc3429dc8", "value": "T128734B013BE88D2AF2AE47B9ACF256070DF4E5576112CE5E3CC440DD5A67BC58A037", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "7cd84737-d8e0-4609-b950-b90ba1a950f6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "55018932-36de-4910-a72c-a6648a878e96", "value": "1536:ChUZAcxjVLcoCJPPMVOe9VdQuDI6H1bf/OQzc+LVclN:yUWcxjVLLCPPMVOe9VdQsH1bfGQXBY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572287, "uuid": "13d29777-adab-471b-8fc3-30f8dd2b6091", "value": 75776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572287, "uuid": "27d9737a-648a-429a-8c85-817824a750db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98eefdf4-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572414, "uuid": "b9d83fa2-574e-491c-89f8-9d1d1849d8fd", "comment": "Malware payload", "value": "d204f8e4c89af08aa598874ba7d0ec21", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572414, "uuid": "d00d3700-63f7-4ae1-a627-0371f874944d", "comment": "Malware payload", "value": "5ec0f26db7ac7422d90369388bbc1164692fbebbcdf2b4b66a0038e973aaa0fe", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572414, "uuid": "d29a9617-3e14-4412-b955-fd31759fdb78", "value": "T17C311D361390811BD9D100A3701DFA809D9912ADAC85EAD2F2F9DE8CF0ACDC860B90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572414, "uuid": "2f906133-aac0-4f8a-9c5f-7618e3cf4116", "value": "24:eNuhhVkTQR1NydEGA/jWdRxK52IK52xKnVmXdpETKP7:J1aumkQVmQGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572414, "uuid": "46938c29-79be-40fc-845a-a57306f25195", "value": 1456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572414, "uuid": "d2c44373-1cb7-4656-915a-f52fb0136259", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcc04d0f-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719572474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572474, "uuid": "ed55d246-17d4-42ad-a1bb-c0d8aeb034f9", "comment": "Malware payload", "value": "2857ee2dc4e72d47b3d2ff852013d7c6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572474, "uuid": "e4815b1b-c391-40b1-8457-5c6e668cba88", "comment": "Malware payload", "value": "acb3319a353ece1589a164fc49b35f10f282f25ce9a1ecb584df4a06ba518ab1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572474, "uuid": "458fc0e0-42b4-4b7d-a4e7-8d80974a8562", "value": "T147B5335E4107607833D0117EEDD707AA656CC97F037AEA3AC8630C27A36D81AB55DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572474, "uuid": "30acd36e-6445-4221-919a-5fde82a7d414", "value": "49152:h2dwx7Z16/fV8ACdZLPvRCQHy1Hq3/261i:h2dwx7KO9dvcQHytcesi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719572474, "uuid": "fa465038-7c25-4cb2-8d59-35180447650d", "value": 2275848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572474, "uuid": "364dff2d-bcc4-4261-834c-17896ed3bcbb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d26cda62-353f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1719573370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573370, "uuid": "d9bb033a-a86b-4a54-98a3-3e452da5ad59", "comment": "Malware payload (AgentTesla)", "value": "6fff7c2eac7664264989f7733c77442e", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573370, "uuid": "83aac56a-beea-4fa3-88da-0f8555cadc41", "comment": "Malware payload (AgentTesla)", "value": "fe6b75f60e0462a07d2a64837c388e440881e3a858954c94ac42bd405dfa36ab", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573370, "uuid": "c863493f-f9ba-4679-bd62-97ec08378005", "value": "T1376475FA6036ED8A87370980D1043F179C299ECF66B847F8778815D5C29C68CADE75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573370, "uuid": "8ec62287-5329-4ef6-b787-5ca2ca9b2053", "value": "3072:D6ZJY00woYHct3TNDf8d/O68fSEIuOFkIHsIgvm1WakID5YYzoctj90NN67vDX3b:SJjk8d/OxrIpFJsIrWakPNIFKG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573370, "uuid": "061c6736-553c-467d-9270-4389173f3362", "value": 322220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573370, "uuid": "3e98816c-0006-4b57-ab9c-f0d428b4b620", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14772fda-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719573910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573910, "uuid": "d291cd13-38b5-4590-89df-95e9fd9052a4", "comment": "Malware payload", "value": "b0d399c7eee1ee84aa8e55b81a4ac56f", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573910, "uuid": "a1c4d35c-2fe9-4f35-9230-280cca249e50", "comment": "Malware payload", "value": "a45e37671dee983884ff411af564c547b8b9322e35b3c8129bb8eb66e6f91ef6", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573910, "uuid": "bd2bde6f-9f9c-4484-aae6-5156e418dadc", "value": "T16604B66EE74F0914DF91A67B435B4A4949FCB33EB28140B1396C973437ADC2E4A229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573910, "uuid": "825628be-881f-4c28-a7d5-08a818e63112", "value": "1536:K6Qw5h6RYz+h8sqkUPIpNvD0zeOh6ODbzXKX9By66fMsSkg+uAoJp:K6Qwr6T2PIpNvD0zet029MzzjuAoJp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573910, "uuid": "bec31809-5a56-4b50-a71c-7c9247791a6c", "value": 179257, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573910, "uuid": "401b708e-6091-4f2a-9020-a7e38cc764b1", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1532f161-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719573911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573911, "uuid": "9bacdef2-69f0-4e74-8d94-02b7e7f15496", "comment": "Malware payload", "value": "04cd0e7a62a06004042a65a4b3f25349", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573911, "uuid": "b031a3fe-fb1a-438a-987c-d705981a22fa", "comment": "Malware payload", "value": "882934ffd6e2d98af9ac44b3c2e8f1ae40f758f4a7afdb066253b7b681646d26", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573911, "uuid": "efdcb839-d002-4add-964f-70c342ab7fd4", "value": "T1F1B423DF00CA39CA44CFA059A353C43688E9C6D473F49066CE6E5DEFBB6E37186922", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573911, "uuid": "5593f15e-6ef7-4af3-a2a6-95d11746c2c4", "value": "12288:Me0w5TNUqle0Nw/crATozX6OKukZtkYyeiD32Z18reR4Mp:Me0Q9F28kZt5tSmq5Mp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573911, "uuid": "431aeae5-c59b-4f14-9e0a-70e8f4be4626", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573911, "uuid": "20028c40-2a96-4cef-9f35-2ed3b7d15100", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "154c1b3f-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719573911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573911, "uuid": "104273e3-4630-4d5c-85b6-46bcd812f5be", "comment": "Malware payload", "value": "d4c3c2767329b24e33301e3c3adc6d6a", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573911, "uuid": "824af8c9-228f-4ec6-ac5b-612ec44d8dcb", "comment": "Malware payload", "value": "d1b95dc6d12a199e88e9d27c7657de5fd0b8821d2b24076fe8e96b95fe24cc46", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573911, "uuid": "6b04ccc7-839e-4476-8a1a-94f4c33455ab", "value": "T132B439A3D513493D995C9B0E7601AABAFDE038D6091877FB5FC8ABCCB0509F1285F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573911, "uuid": "3a2bb63e-e2a6-49dc-9ccf-cccbd921b0d5", "value": "6144:7LZmXfoPUyVLHU502uxp0g965rawptxgfD7pmme1GX1yfPExuU3OyW:PUwhLKmRaraExgbFmm6f8Z+yW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573911, "uuid": "42034beb-3234-4b38-af19-6471c28e3369", "value": 528456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573911, "uuid": "08a0629b-5387-43b8-88f8-cfc145ff1590", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1568b1a6-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719573912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573912, "uuid": "d9266d42-30d8-4c59-b87f-26810a3eaee1", "comment": "Malware payload", "value": "9d3a839d706f874a4e55e419d667442b", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573912, "uuid": "5fd5c81b-c855-4717-8cd7-7ac7308d359e", "comment": "Malware payload", "value": "dfe7b9aaae9d6a57ec8b956f3bba2ae59e92e55dee3e683d727cd34fd0f0d0c1", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573912, "uuid": "dd2ddc78-1b5b-4f05-b83a-14f69953d07d", "value": "T146442382B34293A6349C135F4C4E8E6794A9E78E0C6EC33ED482F1FBF855D8B52854", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573912, "uuid": "93afa341-f8e8-4fad-acf4-ead2e82c2175", "value": "6144:PtCdmj/rXVq/B9KxcRoAxdWwuDfd+jSZAa2V9hMWpSEHB:PAdMrVMxdW5ugAa2V9d8EHB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573912, "uuid": "1878bd9b-9f6c-449a-8f32-8f5d51ebcaa8", "value": 272448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573912, "uuid": "09158b46-d2d2-4998-80f6-8d628550199f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1577d3c2-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719573912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573912, "uuid": "d3002f3c-6e08-4efd-8110-c3b1603de780", "comment": "Malware payload", "value": "9cc29e9c2f524984e4ea412888fad3ab", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573912, "uuid": "deb1d0e9-7958-4594-90a1-d78e3fd01487", "comment": "Malware payload", "value": "6b8159ea57129f319affa7fa8ca8a74bb1e59894e7c269675df3f65b3c5e3887", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573912, "uuid": "becc2519-d0cf-41b4-85d9-3f4f96608cfc", "value": "T14EB45AD3F51290AFBB5C626B440A6AF739725AE7106AF5EC3549B3C8F0608F239758", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573912, "uuid": "84341aa1-3625-460b-9f72-13f766fda3b5", "value": "6144:8wnLTbGvJlQzR9WNhkJFnfU0Ov8gUD6VGBawboOY++idZjWfzGPIGDRdByVaGtVA:8wnLHqWREcJNtFsDOFd51fHZXH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719573912, "uuid": "af555238-43f2-4821-86d9-70d91e2a7d03", "value": 531536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719573912, "uuid": "334a14a5-302e-4bc9-acd8-c193c66cc74f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5961558e-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719574026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574026, "uuid": "1811f000-ef80-4e46-bb7d-212f10bcfec4", "comment": "Malware payload", "value": "1e17c1bdf5e9bfa27c5d2430a4620bbc", "object_relation": "md5", "Tag": [ { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574026, "uuid": "fc305736-244e-4255-9ed6-dff13822c15d", "comment": "Malware payload", "value": "b03aef334a7a8b169e557011fb2e7c8a06875ca9eca5db8393e043aefe41fddd", "object_relation": "sha256", "Tag": [ { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574026, "uuid": "01eade40-5583-4c9f-acce-38fd78a85930", "value": "T119F020EE3CB2734145D290CDB80491613921667B7490BD99B0C54C8E0EDC8C1F1BAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574026, "uuid": "06c2ea88-acf7-4f62-a5ce-be3c713f4d9c", "value": "12:UsHfORaqSaYffV0KC2mYffn3lKC2F6jUhCgPRKGrR:zHfOK/f90KC27fP1KC22UfFR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574026, "uuid": "00b2c2ee-f7ea-41e9-8466-ce5a97b4fc76", "value": 559, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574026, "uuid": "05b5883a-b13f-439b-ab57-ce5844be5221", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59739ffe-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719574026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574026, "uuid": "fea511ff-eaff-4fc1-bc92-c69904f9ccb7", "comment": "Malware payload", "value": "39140ac768575465211aec564640ce8b", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574026, "uuid": "005b97e8-24cf-4452-a827-54111a6176a5", "comment": "Malware payload", "value": "74dfff044ed750c479c2e40fa96961c6da11bcdae6395824e8d7004075f5ff6f", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574026, "uuid": "f02895b6-0f4d-4769-89e2-4439405d6f83", "value": "T114C3A7EE98CA48C3C05F0A7F137D0C8575577EBCC4EBA497C824AE6861967971C8F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574026, "uuid": "f8591608-5df0-48bb-843b-6c644124b496", "value": "3072:cobQc3Vfzi+tUo59nYeoU1z/qV2f9xQXEJHzoxjuWCXZCbJYiZkX/3SATUz5BnN/:cobQc3Vfzi+tUo59nYeoU1z/qV2VxyE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574026, "uuid": "5f7030f1-7c4d-4d2b-976a-ba6b5c1eadec", "value": 124038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574026, "uuid": "6382afc0-5851-407c-bd06-e650dc769776", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a5c557c-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1719574027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574027, "uuid": "c91d9754-12cb-4634-b44c-36562d3521cf", "comment": "Malware payload (AsyncRAT)", "value": "2c29f537557ffe01ebc53101e1d2e3f4", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574027, "uuid": "6808ac24-53c9-4fef-a12b-91b2f72c4754", "comment": "Malware payload (AsyncRAT)", "value": "78f8b338b92e48b5b170955aa70d55689d4d35612e6886bef8882458e4fbe08e", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574027, "uuid": "88699607-29d8-4ab8-9ae7-2c46429b2e6e", "value": "T1A3836EF756136D8F0A2B0D44F80D1300DC9C78F7B3E8856DBF89569699AA8588CB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574027, "uuid": "68835c3b-3bc2-4928-b798-11a91acde18f", "value": "1536:YqmOzy7fTGR084dCVpwpsGGGtA6FZI9M2szVkhmkfacT1eMEI9fzft7+S4:YwKfZXxHGGtA6ryhszOkcT1ecIS4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574027, "uuid": "2a0e2a52-0b14-4437-8c9d-6c684dcc4e11", "value": 86016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574027, "uuid": "7affaa34-97dd-456f-9ec8-088091313554", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a76d0e3-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719574027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574027, "uuid": "0f5df771-fd50-4220-8620-68f9e0e9deb2", "comment": "Malware payload", "value": "a048c1806c4af93ed75ffa87848dd7ac", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574027, "uuid": "7abcc44d-c653-4374-8f35-081310e2b5e1", "comment": "Malware payload", "value": "8fd860676318bca54f00df009ba138bae6bd52ea69786ca4c637466974f4d340", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574027, "uuid": "9d4f918b-e715-4bfa-9c44-4acb41fb3c28", "value": "T10A83C0F3166B7CDB47760D40F00C1904CDA8AA47B7E8E8A67E4959928BE5110EEBCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574027, "uuid": "8d1cc136-3489-4002-b979-4da8ac0fb018", "value": "1536:WF6fK9+KC2cEEp8+0TchwqhhCp5Gqgl/+hi9luAtNqTTxVEE0M:W6fK9+KClEEp8+uYhChs2w9EoA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574027, "uuid": "33b66103-4bb1-4f25-9f1d-f29ccbd57536", "value": 83288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574027, "uuid": "47295f94-eb9d-41dc-be75-5fb4950bce71", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5aa5623b-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719574028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574028, "uuid": "21f38b8a-e27a-41af-84cb-74804cdd62af", "comment": "Malware payload", "value": "b99c72a9a29975ad09667522442c126a", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574028, "uuid": "e7f0ffc7-9833-42d7-80ba-f3074738d1b8", "comment": "Malware payload", "value": "605494c27dc2e89687a1764e601747497abd9746c35ddd9ca5da25c76b7d6aac", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574028, "uuid": "b049d49d-1767-4dc0-8b1d-1af2781f301f", "value": "T115B3EBEE98CB49C3C04F4A7F137E0C8575677EBCC4EB95578424AE2862967971C8F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574028, "uuid": "28c24bf4-8dce-4453-ba5f-b431c4702aca", "value": "3072:7IUOuYoYkc5iDOjhvMxBXssTrrlRkwiZZD57/N0Jrh/wbsBHrLnLNuSwcDEoa9Kd:7IUOuYopc5iDaRMxBXsKrrlRkwiTD57Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574028, "uuid": "9db2dbf9-edf0-4c5f-a012-ea762b24f7f1", "value": 109746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574028, "uuid": "f0be6dd9-72a5-4d27-8567-4e6e64d937d7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b728afe-3541-11ef-b2b7-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1719574029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574029, "uuid": "f66a5fcc-b0a4-41ce-a673-a7a8589fbf0c", "comment": "Malware payload (QuasarRAT)", "value": "f1597f53e6a51f6590494e47796a6dbb", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574029, "uuid": "833f5bcf-3078-4ede-81bc-c5b3b09225d8", "comment": "Malware payload (QuasarRAT)", "value": "627b073e3a8c5305f96b035036cfec7704e9460be5cfb9ab2884f98b23595163", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574029, "uuid": "1cf6478d-99db-422e-a814-4a924d696cdf", "value": "T170454CF13643AE8B451B0E52F82C16C5DCBCA44FE1C980AFFA0A5AD276498149DF1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574029, "uuid": "e6355141-62fd-4492-adcf-c2a55d0d880b", "value": "24576:Gmr0R+DjmB7Avj5dwDkTSnFGiSFMudTVDdjQtiiJtDXWxh+:GNAvj5dqEFMu7dYtA+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574029, "uuid": "cc8be6a7-de42-482b-b813-1ae076ed02db", "value": 1251328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574029, "uuid": "ef429161-f58d-4c0b-9540-da99dc1ba8a7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b94c2f1-3542-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719574486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574486, "uuid": "0a85dc16-5d95-4f63-8398-304cb00a9d6a", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "1ff497493883c6afd1a042f82acfcc31", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574486, "uuid": "0c7f4a7f-09f6-4021-b0ba-d05e284cc830", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "fcf7620f0852e28276a8036d70ce5570227d8f665f317042b94b4048cbbb8b7c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574486, "uuid": "337ed90f-7795-4582-9959-78f7c04a0053", "value": "T181D4BE5376E17816E3B74B305F3DA7EC6B2F7C526E70429A11083A2E19396E1CA177", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574486, "uuid": "45715cce-3ba5-484d-8641-75fbeb001fba", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574486, "uuid": "953ccd50-6595-4a82-8112-4302bea69b78", "value": "6144:/LPjxtDetBPozEWl+wcDoYmxViFQpQvp/mhEy70jESPEgPiAdP/9kN0hfHf2k1X:/bjxCBPjWl+vo4FlxrcKHMWNdtk6nrX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574486, "uuid": "5583a46a-98a4-4f5f-9fe9-04b606bf11c6", "value": 622592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574486, "uuid": "0d779237-6561-49b9-ad56-1bab9b4aa0fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52c104b8-3543-11ef-b2b7-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1719574873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574873, "uuid": "c0b875b6-1f5e-4f38-97d4-9b4192dcc51e", "comment": "Malware payload (QuasarRAT)", "value": "78a7612603af19fb92d614af1e769f2a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574873, "uuid": "7299b311-5d13-406b-8be8-d945304f3c97", "comment": "Malware payload (QuasarRAT)", "value": "73399ca48340bd7a31da27d573966f23371fe4ea82625ee3b7ce2772386b9e04", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574873, "uuid": "f793edd0-37f9-4b44-9fab-eb88cba5e152", "value": "T119062397AC619504DDF741F2F988A10855903A5ACF2D61CDD2CE898A2432CDDFF7A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574873, "uuid": "6f8de78f-95b6-4835-bdde-c35adcaa9fd6", "value": "ed4962dc6d69982d0af6070ed1241520", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574873, "uuid": "ac60e4cc-75d5-4159-98a0-e9cd76344946", "value": "49152:LdbIKJzytEyM67fYoiJTwC/rMIqLwRjwVofSOtGhpGjyxqRlEBPPmgtPXVMNmIqK:RfgEy7755yrkwVwVWSqjePZ9Xg5cI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719574873, "uuid": "3e5a5194-2fed-4f74-88e8-5b14d36daffd", "value": 3760464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719574873, "uuid": "9c782c0c-c812-4e23-857b-dba011dd2d71", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6a98914-3544-11ef-b2b7-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1719575471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575471, "uuid": "39928de5-c54c-4fb2-9abe-5387dbce6260", "comment": "Malware payload (QuasarRAT)", "value": "bb59989d4e2157578f817973789c5f69", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575471, "uuid": "65f57f7a-dad8-4de3-91bf-8eb641f3abf9", "comment": "Malware payload (QuasarRAT)", "value": "7dbd5ae1f4b24d095fc267adb5877fe98f46f7a2a971c7800909e5f3250661b1", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719575471, "uuid": "9b8c1dec-7a47-4912-8a81-a1aa0f1ed945", "value": "T1AB4549328E06FDCD177A2E4490042D9B1F683A6F87678558B49C07CE73A5191CFAC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719575471, "uuid": "94c26ac2-c2b3-4e91-b484-68688e3401bf", "value": "12288:lyrFEawl7vj+pVvHgVCZCkOAfpURxk2Z5e3SSkPJftMOW28qW28WXDoe+s1JbljL:IFdW1NKvbve/+EJbjMFGA7EV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719575471, "uuid": "44ace2b5-01f0-4284-b17f-0fccc9105f9e", "value": 1251328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719575471, "uuid": "5a8b3765-7930-41a8-bc98-42573a86c14f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc74b7d7-3546-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719576393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576393, "uuid": "1d4f25fb-eeaa-4f8a-b39d-0c4590e54e62", "comment": "Malware payload", "value": "ca8f47a9d8225382a630f5c5aab00108", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576393, "uuid": "eb22e85b-d2de-4d49-b0d2-70e10fc313e9", "comment": "Malware payload", "value": "b25a81edbec9df4b1a0c8595aafa5692d7ff6eeb8ad4344f48011d90a67f165b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576393, "uuid": "c28390cd-0be9-4873-9676-c372364564d3", "value": "T1D3B533D25DEB943AEB60537480296F647D8424329DCE3EBC8430F9AE99323163756F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576393, "uuid": "bdfad512-f5cb-47ce-a876-b8b334a33002", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576393, "uuid": "92466c9f-6c72-47b9-a144-739602a39d95", "value": "49152:fePVva/Fo+FRn88snb2S0Cn+Vvzq7OsSyudOMIJCc:fYarP9yKS0w+Vbq7iyudzc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719576393, "uuid": "83fcbbb1-4dcd-4290-a840-ae0f6f41eb18", "value": 2376704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576393, "uuid": "07d71ed0-c610-4fff-b1d1-5dfc1297da65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dcf4b77-3547-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719576637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576637, "uuid": "7bcb9486-5289-42e0-8308-d0eef63a74b8", "comment": "Malware payload (Amadey)", "value": "c9d42391bc824ab93b687a01dfddb73c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576637, "uuid": "f0f27c6a-3d79-46fc-8f86-d6e507fedd81", "comment": "Malware payload (Amadey)", "value": "1cd15af74427f7b75a6f8f3f46bf8f9e2cd1bd206a11415ac0eb1422d095a2ea", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576637, "uuid": "43de92b9-bfd3-4cb2-b330-4ac2a4c82950", "value": "T11995332F7E438D95E437C2B8AED33B2E78F99205279763E37E6210A5961331B3592C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576637, "uuid": "e1e66c14-8fd5-4b2b-91ac-d1e0d2797f6b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576637, "uuid": "f726770e-d689-4fa2-80d3-58a716ffc629", "value": "49152:rVWWxn3iuASrNjX7fQ/dVGPeFl4OZzs2LtEODm67P9nL:xW03iuRJjT2dM4PYItlDmaP9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719576637, "uuid": "514034b1-e378-4b3d-843b-817a1ee32d69", "value": 1899520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576637, "uuid": "360552fe-79f8-4f90-a18f-2c003277cb1b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83dabe30-3547-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719576674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576674, "uuid": "f8218d20-f63b-42ea-9d83-af518e33b585", "comment": "Malware payload", "value": "03d66f9f376bff345b0e02fab9e1fc7f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576674, "uuid": "02a712eb-62d1-4a3f-8805-0c05913c0a73", "comment": "Malware payload", "value": "1dae7e423458169e9b6def40c48936f2a2c95a3923ff6731190058d78ea850a1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576674, "uuid": "7c72cb70-6f93-40c9-a3c2-152adb8f27d9", "value": "T10C159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576674, "uuid": "9c234170-d0d9-4f77-acf5-ad913cb2dac8", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576674, "uuid": "951b0ee7-563d-4ade-a9bf-209c0dc57262", "value": "12288:KqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T/:KqDEvCTbMWu7rQYlBQcBiT6rprG8aA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719576674, "uuid": "ed9b9a92-28ae-49cb-8d8d-33bed02b16cf", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719576674, "uuid": "7547b091-279c-4e3f-af5b-842f6f88b1ec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "560ed284-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577026, "uuid": "7b30b94c-1e8d-48fc-9ead-7d2645a39cac", "comment": "Malware payload", "value": "cc42f6ca0b1275ce34ad24f8613b89ea", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577026, "uuid": "da3aaa9e-7676-4ae2-9e44-2268669d2df3", "comment": "Malware payload", "value": "a1c6e22d87948c77f019fd09df63e79cdfd12d949a004360a19bc8309c57b2b2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577026, "uuid": "560252ed-311a-4618-b38f-fc73555170d0", "value": "T1AD514362061592AE698C205CFA0DFB84DD5C313D8E478192A3F1CD58E1DB67921BE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577026, "uuid": "129518ef-d771-4af2-9224-dcea9215cc79", "value": "48:otFdiB1pKVaxI1odCHcqhQYv3JRrldks1Es7ack/hJqHiO5m7DVn:otGjpKVaxI1uC8qhQElLfEs7ack/hEVS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577026, "uuid": "a4b4c9e8-5b22-4d22-a053-c5eda4075a5f", "value": 2827, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577026, "uuid": "b3e2b820-82e9-4de4-81b3-6bf12a23740f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56406c02-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "d133eced-40e9-4e98-b967-ed09cb4bc3ab", "comment": "Malware payload", "value": "f70264341d8daead5b61c1b1801a8d67", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "91e04b37-88b1-41ad-83dd-11f6438626d0", "comment": "Malware payload", "value": "6e1e2aef3104c1486ee4b2f3ad3742cc08005f808ebe069d2e1ae44cc2c86f5b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "e14b089a-ff09-4955-9658-05a15bf60fca", "value": "T1CB21243C424C89266DD85150750EFF504D0A126A5E05A4DA71EDC95CB0DCFE472791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "948896a9-7480-479a-9fc9-fb4ec27869ff", "value": "24:3nGC6SS5nFtJzBLw1Bj0dQ2u0ezFo7YEXfuKC28l2xwZoZQZ+YZUh8XBRfY3:3xkLtA1J9X3no2oZQZ+YZYd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577027, "uuid": "4cae2f87-2a98-4dae-ac06-5655be065810", "value": 1438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "3b615c1b-1e36-48cd-aea1-5c39f0b12960", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56449fd9-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "c940e747-6a26-4321-81e2-f46811f35085", "comment": "Malware payload", "value": "3b66232d1c46d870a4423ab4edb0c0a7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "40ad3894-6556-41e0-89a9-19067be7bc15", "comment": "Malware payload", "value": "9e723e7737ab7bcd12faa0fcec7187b85018747a046a6a4afbe8e860a41a513a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "42259f61-142b-45bd-a600-742b65c65c39", "value": "T18E51E1318624B21959C2517134BDEF14DE49522F4A4890EDB2F1495CB3E9FA4ACFF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "abe8a99f-49f5-4154-91b3-15a78cb00436", "value": "48:lURIwS61kd2Q1x74aVHAbm3U+yGgyqqi8cw86mQ1FNGxsC4IHAm4tUNrg/uuF8u:lSvMD5VlE+Cyqqb82ix62y2Bu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577027, "uuid": "22b05f87-76ae-4d4e-9154-25940ccf715f", "value": 2734, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "49d8e3b9-7f59-4a5b-9e30-a15d6b8a7d52", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56467abe-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "56c979c2-4944-4cd8-b6c5-b6102f06bd6c", "comment": "Malware payload", "value": "5a5cf7e622fad4ddc7e69063e49ee370", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "f80b8d42-5e8e-499b-bda9-1bacb0686e44", "comment": "Malware payload", "value": "4b124df00cecc7395d32628a7446ff318eb409f3e5733a5df047e7b162b0c6dd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "b9c15341-f90e-455e-87bf-a605616aeff5", "value": "T1DC5133351E1DCD259EA2A2E0705C7AE5DE0A03BB5C1CA6E071D5CC4CD498D28A5FD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "ee9b72bb-6372-446c-9231-eff061b100a4", "value": "48:mDp9l1CTuPn4b7gHDHVPQHofcBw1GBL9758oac3fU7UJEQ2B8P:mbLP4b7WzVsCB0L9t7accsEyP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577027, "uuid": "15441754-5336-4bfe-acbc-246d2c645f6f", "value": 2857, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "d58970c4-9b9f-49da-a5bb-ade4b3a8e301", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "564da884-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "d4f5e619-2e0d-4c8d-ad86-005b57a91111", "comment": "Malware payload", "value": "b15c26f7258dff3d667deb81a7ed5f1e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "81e425ca-538f-4d0c-87e6-482b08c56bd7", "comment": "Malware payload", "value": "7d24fbc2cbcea09379a8442db90891044459b3e6cc1369375a82ecfd0e241f2b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "90b85bfa-66f2-49d5-90e1-30788b110531", "value": "T1DBD12F328399F23E49D7609A710EFD288E39137D9804A5E4F1F2897CF394969E07D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "e3591d67-74c2-4214-911a-8a88939b961a", "value": "96:WuKDJeHFNkeYLxHUw+GoiYVAkVjldBjPiAe6lFU6SAfiYmk61+djEVP:WDmFNtO+G1mAojXBj6OFU6SAqg++djS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577027, "uuid": "fccdf96c-5c4e-4cc6-9701-47c2219482c3", "value": 6763, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "70f2d3d4-b0e7-464c-a519-d962ea1c3163", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "566fe251-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "78e09b26-7c7d-4ec5-9acf-f1687203a0cc", "comment": "Malware payload", "value": "d6b635a7615b22cdf64b0f5bda7d0bb4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "8c06e4f1-67cc-4bd4-b6c0-fbbc0dc7a403", "comment": "Malware payload", "value": "80ea02a65544546304080aade0543e12edf9d2ad3a9e1b92c17e07777ec7ac6b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "9d872515-01c6-4ad6-bea9-676089b87c87", "value": "T1A3B1E12702B8C53ACAEE2081710EBE51AF09227E4781E1E6B1E5CD98E5C7D5425BF2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "3c020dce-ff4f-4b9b-9ec4-2dc8a01f2fa7", "value": "48:tpsy1qwniHT3rUhBPYTLpLbgYHPIQmO1U5K3tOv+ZnHH/TLpLn1sgk68vB3rSX84:tTqbzbp/JMv+nsdpb+u9uhAC3bZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577027, "uuid": "6d485346-abc4-416f-a60b-ed9f7579b88d", "value": 5338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577027, "uuid": "81fec61b-a9c2-4409-be62-8b24e64433fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56afefc6-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "78934541-e98a-4737-8802-9d7beb24e9c0", "comment": "Malware payload", "value": "67e4f55aec269d824b727f1da743d2d7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "641e70c5-b807-416f-8988-ddcd718c5137", "comment": "Malware payload", "value": "1c5445264c66e71cd78dd72ad46e5704ac9cfc9153f04ab201c387e42f69fb4e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "d0daf08b-39b6-4f06-be28-0705c5433035", "value": "T18A31547A8265835C4FD61653780AE685DA4C01BF736C90C02BDB0E48F4A4D3962792", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "a660352c-6d0f-4fb3-adaa-39c80d20a8aa", "value": "24:rY1RVuBiOJpI3kLw1C4pcNlziAuOPrNGKC2wt2x6hJh/yU7Y4Y4Y2vFATevK4n:rQmLy1fWlWJOPrNG3/Qeh/yrjj2NATej", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "c4b45528-16e0-40d2-81b5-3b32bce5c4b8", "value": 1464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "a4ac52f5-4f84-4b17-be03-2a8f40695b6a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56ba276f-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "bff2825c-c513-44c3-8fff-261a791fdf44", "comment": "Malware payload", "value": "fdcc6703030a6e826ee4a1d5af4fd5b3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "2cb0bbf5-dfc3-4a57-be31-385b74046078", "comment": "Malware payload", "value": "99ff6fe13f3ced1fa42981a4c335623828041e317c7ee481e78f5385f25775cc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "be6bb499-fe25-4d2d-9250-cb1966af01e4", "value": "T13C211D2A0F99831949C132C4B11DFE80C51A12AB4D0CE49A72E44C2CF49E974B0BD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "c2c97e7f-024f-483a-850b-560c3b8bb352", "value": "24:rxOBmuPXUcWLw1fPP1/KpHbrSZxqKBAioVxc23dS2xaeRlgo7vOZGwH:tC9n1PuHbrIqKBPuHblgo7v2PH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "879d7c22-e350-4161-9007-87f3fc3ecbca", "value": 1438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "d594144e-4801-4717-906a-a10ca473c99a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56d3ea3a-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "e4a0282e-0f9d-476b-91ee-58a590c79ccc", "comment": "Malware payload", "value": "24fe7eaef1aa38c2673b6912eda44393", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "98f2b605-39e6-4a41-914e-652ce20d51e8", "comment": "Malware payload", "value": "6ceb0aebd86a518f46599fdf5142fa8f92a9bcea808c809b1e05f314f47d43d8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "f9235016-90b2-4ebb-ac62-90d9e1d72b06", "value": "T1352144F44A4AC23ECB4E05E2B0499586A900117F5D07C6C0B2D798ADF0A8D6CF1BD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "ba7d79fc-6b06-4005-becd-e42e26c9dea9", "value": "24:LCrRrOw+prxpLw1vwrnu+MWti8UwK92CXliD4EL6WFtJ/GNW2zG:e9iXlG1Yi+MW4EK50cEn/o1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "337c251b-cf2b-4958-915d-71986a3c7a13", "value": 1408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "d722f075-c65e-4131-82f0-fc7852dfb3fa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56d9192b-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "8c43bd04-e292-44b6-834b-9dc94966e928", "comment": "Malware payload", "value": "36b739d764f8848e5e0b1a7424b77b2b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "ae52eb9b-8893-48ea-9843-f3b8c8af9cf7", "comment": "Malware payload", "value": "fdb6ef8c9ed25897af84048caff4ef0738e20561c2734aa4f2add5b1e76358f5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "bd597ff5-45d1-4992-a7ac-d1aca29fe283", "value": "T1973124300355841B8AC731E4341FA904DD0A0269BB48BAD172EEDEAC9446A57B4FE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "1dd86a6d-362a-454e-8fec-0a52072f2e17", "value": "24:Jq7feRzuOGP6Y8gm+LwIcwp+UCJ1UziJ91E0ctWfE5LfKC29g6C12xmNQxjlcUpr:w+s4hwp+UCJizKnE0TfE5Lf3ghi2aeb7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "614dffb9-c8d4-4b4c-b373-fa7cab724348", "value": 1444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "6698623a-ca4d-467c-81e4-046c7528df4f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56e44bcd-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "c32ca117-76ea-40c9-91dd-aaaa3627c418", "comment": "Malware payload", "value": "940db1a9ce4c42fe7d5ce6a89f5d2811", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "d3a764e7-92c2-45da-849b-36040c72c3d2", "comment": "Malware payload", "value": "fdf5e09455de872df26a07a3b9425d3234f435cc4b90c60f17f5672f7d6d0387", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "d8731995-c24b-4586-a5b6-b25b9e1234de", "value": "T16B5132210799822A4DE4558070DEEE49CD29937D7948A8C271DA4C9FF0DAEE124FD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "d4c91ae4-424f-4dd1-9b6e-bd41625535fe", "value": "48:D0nSw0Ss1bbzJ83wxtlCxiCk7UEqv1k8h628KjqCv4h:D/D6gHoque3W9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "2a78a7fd-0f9c-4eec-a6b5-1924e9528c3f", "value": 2820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "bafe60c8-7350-4b39-a285-5b97cac897bf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56e7e90c-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "85aee69b-2d60-4625-9b50-c9c34a83ed17", "comment": "Malware payload", "value": "4d511e0dde5f019d048bec5b0e382398", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "7f9d1e4e-a302-4db4-b650-0be76b0853e1", "comment": "Malware payload", "value": "c11b14ded726c63853703f4c5324dfe946a54d8a00dd263649692fd9f5d874af", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "ce698f49-249d-4795-af91-3dabfde25376", "value": "T15081CE6203A9D02ABFB271A0B40EEF448C0D232E57C4E6D673D5DD5CE09B99465BD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "43c9ea44-a311-48ef-b689-1e1a3ccb369c", "value": "48:JjtK1zWQOK3wRwZvo3xlBFIVqiZaClhQL1UJ/f3wRX6wlMfr9:Jm6nKgyZGfTSYcgJ6np", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "73a791c9-e861-4255-b16e-9f56c6feaf93", "value": 4002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "8f2d2b49-7f4e-4afb-8d1c-4aefad81a35b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56e8afe1-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "6da784e0-b013-43ed-9549-e0ee50257894", "comment": "Malware payload", "value": "7c49de0569569eca1bd78ea18a936ed3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "1151fba7-86d2-4f55-826a-c64008cf8732", "comment": "Malware payload", "value": "08c9d3555fa6283f8873d1896f884f57f7fa6f30f43630c97bd81cda503f6e38", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "c062c353-ff52-4e3e-83e4-7c7c4f6f1735", "value": "T1DA31143643C5A57FCE4111D53409D984DE7A472E4A1495C072F14AE8E4FD8AB707D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "1ac77899-9a60-4683-bb3d-bdff648023e2", "value": "24:N9dctCuyiJGCxt8MLw14xq1khix/PKPC2CMV6x/4WIz5IrCU:NPEOt1DJnCC1MV6heIX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "a07cbd33-1beb-44a3-a06a-fd04354e9beb", "value": 1445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "082e98fb-5ea7-4d4c-8126-6e635bce231f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5701cedf-3548-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719577028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "850d3df1-4ca3-425b-bf7f-acd7495d0b60", "comment": "Malware payload", "value": "d5091da0fae247959c1afec2551a1f4b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "47be826f-9bdb-493d-97b4-afb0c06e3767", "comment": "Malware payload", "value": "3a330e815e1f2ecb1a2e5277b130ae2035aa78f08bd2a856ac7ab65fce3ee4b3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "2cc1fd93-2f94-402e-a48e-5d2ab8e9866f", "value": "T10F81F03116DAC11DEA86914270CDBA85CE08037FAA58D4DF73E5AC5CE0EDCA8647E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "422b85bc-4564-4597-8518-1cd86f0a5ff4", "value": "96:fx2fJIS0+WpShbg3L2V0+WQOt+Z65n9zLmrneK8OWQOl+ZvkUgHwE:f4OSBWpShbouBWQOt+Z659zLwnehOWQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719577028, "uuid": "4effde3e-1153-497f-8143-f85af1ccfa9a", "value": 4150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577028, "uuid": "acc8994d-8c10-418a-9097-fe2343ba19b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c76ece5b-354a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1719578076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578076, "uuid": "dd2f123c-5e9c-42a3-adaa-238ec9996f39", "comment": "Malware payload (Stealc)", "value": "773e8af03da6e64f25166e7df67d71fe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578076, "uuid": "c17aff13-8814-4c8e-b7ae-1f07ea44755e", "comment": "Malware payload (Stealc)", "value": "03b6b9b10aad113cb8e9bd43d0ed189dde70170e6141aa2bd3cbec5644e7553e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578076, "uuid": "93d22313-f25a-431d-993f-fc1dbcdd6ebd", "value": "T166B5337A83023EA3E99E4A70EF4B5C7CEA59447C65D19055E2CBDD2E112C6FC0CE19", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578076, "uuid": "5c3984db-23b6-42aa-9de5-f25007ac9d0f", "value": "001806c33a6e9fe5fbff34bdbd79b591", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578076, "uuid": "b9b602a3-b737-42ee-b81a-7f517da9dd59", "value": "49152:InkYmh7/egM/WXtzFAmlR0yIwsMa720naH3QqN2zw0XTUzQaQo6Az99ZP:InkvZmgCeM8KTN60aH3QqN2z5XUQawAB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578076, "uuid": "77c67cef-75db-47bb-a752-44ed3b0ed762", "value": 2467328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578076, "uuid": "8d87157b-452a-404e-8e89-cced341f8d90", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83db8145-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1719578392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578392, "uuid": "c9918c44-55e4-4f9e-8664-6dddb9dda50b", "comment": "Malware payload (RemcosRAT)", "value": "6f32c0672cc1db4dece10421e8165a7d", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578392, "uuid": "5c6f9a02-c51b-43da-8b8a-1c0d1699a9b6", "comment": "Malware payload (RemcosRAT)", "value": "a17f2a63aac712667f961ffce9d38bed86ad7fa98d554d5ff4929a47feba0fc4", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578392, "uuid": "1d6d14a5-5e16-447e-a341-4aff11861862", "value": "T191E4B0B99295AC9F0E1D0D62F408174A5C6C44D7F678D2F87E82B4F88A961A04FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578392, "uuid": "83cdf120-5b26-4aaa-af2f-02c5a5970cdf", "value": "12288:akWfYLWw+GUizqo36P+F9QFojBXC2slenIFHrg+j3VSa:Nc4/RzqoKP3ojBXC2ienIFLNjlJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578392, "uuid": "6396661e-2bd4-4f99-8e9e-70809e0241b7", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578392, "uuid": "98e108c1-e72a-446b-aa72-f7908b13e3b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0f52fdb-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719578467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "d4d3fd06-0b7d-48bf-ae8c-145008627de0", "comment": "Malware payload", "value": "03886bf0d399576fcb6db8c11fcbe06d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "c20256c3-2de2-4867-af0b-6d00cf92c588", "comment": "Malware payload", "value": "19e122301b598e2a4a36b685887b7a2c238debfd310fd66b7d719d6454ec6ed2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578467, "uuid": "003545d5-345a-4b42-85f5-340ebbc9b942", "value": "T15341A385B3204535BFF29E6BB5B4E51CF680A5B35ED49E41D1EC38E9C84CF8834A0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578467, "uuid": "f71de781-8902-45ae-ad3f-1edf072bb9ce", "value": "24:vOBROSOEBaIOSOHTPHkaUoOSOnIoOSOSpOSOFPhOSO0BOSOYbOSOjtOSODojOl:vuRzRg5RpoRFR0RzRHR6RLe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578467, "uuid": "be50893d-ac43-4078-9c02-2af347b579e5", "value": 1933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578467, "uuid": "bcd653e1-cd3e-40a3-ad0b-9af9d5745614", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3f490a7-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719578526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "c8fee0e6-c473-474e-8d35-b9c2bcdb4f0c", "comment": "Malware payload (Mirai)", "value": "3c5fed34d38ce5ce09e39a008364144e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "e948367b-8236-4291-aac1-aea5418e40fe", "comment": "Malware payload (Mirai)", "value": "cac8cd0f75915b88a2b7e18432048680f40f7dee0ca0c4117c0064c0ea902fe9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "f2607e97-310d-4981-8a62-ce1f584a30d2", "value": "T1D9A2D0249296FEF1CA601D3BD836C18A1B5757BAE2FE35607528D0983A825936BF40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "dc3b8ef8-80ac-4033-adf6-709933dad575", "value": "384:/lLipjSPrNEbcSCE0CWmJWtaIN+DgnFNeluiyh7qmdGUEpiaaP:NLcSPNvj6M0l7y9q3UEL6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578526, "uuid": "1906019f-5e9b-48a6-9b3f-bca382d3a0fe", "value": 22596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "b9d30270-20c6-4900-9aba-92517bb26e74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "955c69ab-595b-4d9f-9c46-50dd09e05241", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3f980a6-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719578526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "850842f5-d95d-4bae-b0e9-a138b715123c", "comment": "Malware payload (Mirai)", "value": "18b79131e6fc36d7246c8d9517e28c52", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "f804bfa9-0534-4e3b-a268-5e52ab64687c", "comment": "Malware payload (Mirai)", "value": "586be05c12b4ca301d1b07f3982127ce0fbc3595ecd1f3575b0b376f0f303c9e", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "b6e00507-c6d9-47a3-87a8-54e138c377c9", "value": "T1CD03F19983A4891AE4EE9276DADA779933005FDDF28588AFFC40D0A50E0DF0D5B5D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "8e45f6ae-9c85-4a3f-a4a0-f624ab73a198", "value": "768:RbDTjtLatsg6Xp5IsvKheZ2gzvhltm/pkZGhDsM6nbcuyD7UGQRjQyStKr:5jtG655IsKhatlspkZ0DsFnouy8GyUpK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578526, "uuid": "6760da53-2edc-4235-913a-c38ec476382f", "value": 38720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "a31b5fd0-ff43-4226-b659-4b24b5fd63da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "e1f9c329-befc-4d4c-a9d5-55b2d6a3d06c", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4084c19-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719578526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "a008a6b7-1ca1-4d4d-b733-3c4342ef95d8", "comment": "Malware payload (Mirai)", "value": "44624351ddf69e792bc03941cf7a4ae7", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "4d4c6027-6a8e-4f22-a9b3-e7f88d42938d", "comment": "Malware payload (Mirai)", "value": "989a87da34331f263da858cd006bf82d7059073f019a5b680112f2c543109620", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "047d1fde-b185-47cc-a608-49ac4ed62885", "value": "T19C03E1B0D4C22F81EEF99CB4368EF74577A0AE2D6BBBC4C37406A7055252991D580F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "6058f436-65d5-401f-9edb-caef0d3d1940", "value": "768:i5j8Gq4ePzMs0lYa2soEMtc+tdp9llNrUe4uVcqgw09pvAT9vQpjFTRLjeMbtE:ix8G3GMNl1rZ89pVNH4u+qgw09pvWQpG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578526, "uuid": "01d20b67-f86e-451c-bdf0-9c75e6d617df", "value": 39016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "62ae66b4-a505-4c4c-bbf1-2ff922f45452", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4281e1b-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719578526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "2fe17954-60fa-45fc-b8b5-98b40dc9ec3b", "comment": "Malware payload", "value": "4ab6dfe4031b26a267b3c64d2cadd751", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "32ff6ba8-29e2-408b-b348-85ad51808125", "comment": "Malware payload", "value": "79f7ef554233cffc425828f4ee6aa055a9ae2dfa60021a9438fe53fcaf3d9e58", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "801e7fde-ebb5-4337-863c-f6c3f215aa78", "value": "T10F13E16819D4A476E867B8B543A433505C7609E2D663D84ABE4FEF839D038F65892C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "575352f8-7eeb-45e4-8d1b-af240e9ad474", "value": "768:+58rMTrTtN+prxbLgp3Pq9m6ciiQbts0XP92dHQ4sdLhJgGlzDpbuR1JRK6aMlC:LMnTLyLgpfq9tcEtDXeHQ7VJu+OC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578526, "uuid": "11b90fed-08d4-4db2-8e07-569a240d64cb", "value": 43608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578526, "uuid": "833f3ad1-30c9-4d48-a0a3-a54a2da23982", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d430d9e0-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719578527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "7c951025-d9cf-43bc-ab6e-8caf4fe2da3c", "comment": "Malware payload", "value": "1a27803ed290be29ffbea84f2e9bbfd7", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "99a10a9a-22a7-4fe2-9d0b-6a9235d942ff", "comment": "Malware payload", "value": "808ecbe5cd09bbfba2c0717ea369bbbdbd24aff17e5633c9664e85acbb991805", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "63f0b32d-ec21-4325-8c72-6d948d31c8b2", "value": "T14F33F2E145F2E812F3E51C3F5768078AB1F82A79DAB9B951A3334C181DF984647ED3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "1660af0f-43a2-4d44-8f59-73620e342a95", "value": "1536:JCoqsGR47SFYe8iqJNlQGR5LtvLuc7ckMr+:Qoqs28nFiSNlQGR5LtvLH7cV+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578527, "uuid": "638b05b0-3b8d-49c7-a833-7c75fe077164", "value": 51456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "262d03f2-4dc2-4050-a153-3b90b5b46fd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "2a66ade0-2a4c-4d8c-82e8-00d468044262", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d434d3eb-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719578527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "95523a6c-93ed-4758-bb9c-106fd5b2bdcd", "comment": "Malware payload (Mirai)", "value": "dece9d501f69ac5aba6a072fc6a9b1a2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "01597d7f-ff18-443f-af1c-54fccb92385c", "comment": "Malware payload (Mirai)", "value": "8c91a42023481c33afc658df9b8e60b9cbcfa3fb6cb9691fc4fd2f2fb7cddec6", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "f1b94027-083b-476e-9971-37d5e6c53ca4", "value": "T19B834CC5F402DD7DFCCBE67A48160E18A57172D40A930B2667A7FEB7BE62158390AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "2c58e427-09d6-4804-8052-c9da055c1866", "value": "1536:nJDU5XSbfU5cg0fR3E87Ia4KQeuacWjcW0JcWcBfAkYBrJhAmcIa7vm:OXSbfU5t0Z4KQeuacWjcW0JcWcBokYBj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578527, "uuid": "9fdf713b-fd08-42c0-a0be-1d7256463e13", "value": 83616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "27dd8b29-c4cd-4760-bddf-f9714a9d9bf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d43e0e74-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719578527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "1686cbbd-c220-4f88-85e5-5402187f1ef6", "comment": "Malware payload (Mirai)", "value": "5987d2f2c77754abcb425086b94e5627", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "b81534ad-62d7-4533-b534-e0caca7157bd", "comment": "Malware payload (Mirai)", "value": "a5ca7d0c8b3a41e59bc09d12a1577406f4efc9fcc917191f8a2e35e0a86562e9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "7ffdf8c1-00db-4ee8-9119-fcbc0b7673a6", "value": "T1961302DE79F56A15CDADEDBBF28903990F88F0003ADB551796500DD85B28A0F78CA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "b619f679-752c-4187-828d-39ac2fa71a27", "value": "768:zqCDkRxetUrrNPwOgZqpkGHUR+SOjMU9TkU2iWNedxaKQP:ODJPwpoHq+SzUSUQUxFQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578527, "uuid": "d456d6a2-a506-4185-9896-0814769fed4d", "value": 44640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "1d483845-06d2-4a4b-8891-de0b0fa2f424", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d45d4032-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719578527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "fafcff00-fb44-4c33-b33d-0013c1011adc", "comment": "Malware payload (Mirai)", "value": "e8fbeaf5da9263b5e48b21861084d0a3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "e7c40cef-95f1-4dbd-a9a8-6dc5bb8f5111", "comment": "Malware payload (Mirai)", "value": "8ba5c0bf35cceac18f4c9c65c404c0fea927641aff9c934b3b2b345b682dbf2d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "744f827f-6e61-45c1-9c63-bc657bdfe18a", "value": "T15FA35E17E1B19EA3C0425F7D15EBDA340B13A8865B132E72E61D8BF80A43DDEF848B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "8ff1c602-484f-44f7-886a-5eb5acc5e408", "value": "1536:bL12949MK8fjenKhHZvn5LK4/hlMfOjor0Re4zP5+Bvs8RQBsrhB:bBO4+K8fjFHlifOcwhgskB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719578527, "uuid": "02ae0a59-18f1-499a-a306-ee9715e97899", "value": 100123, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "6d2b4b39-1c65-4bf0-990c-809cb05ce7c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578527, "uuid": "193588c8-ff76-4aad-b3dc-355a71f0957f", "value": "t11521acb1572aa6245969cbec89dc73b9122c83121247df33ff2584fca41949df525c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d6abb6d-354e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719579806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579806, "uuid": "3c1a3420-4884-48e9-a448-aa7c40919016", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "5c9640230f92d25a17c5e606f7ee271b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579806, "uuid": "8ac90a89-2e89-43a4-b31c-aaef6db44e76", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "98b04058d8910d6fb9ac61357e4792e8de5aa548e90e17baf1e692fc26338569", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579806, "uuid": "c453ec11-50cc-40df-8c87-df2a0a90eb62", "value": "T1F3D4BE8275E2B816E3B78F345E3D92DCE73FB8522E70424E11081A6E19757E1C96B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579806, "uuid": "221c20a3-73f0-4bf5-aba9-59d8535948bd", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579806, "uuid": "669def73-8bda-4cfc-bbb7-aac07e87f9c0", "value": "12288:UEaa2bhYZCtJSQm4xGrpdZJrGHJJF0KcoQBitSX:Bih8Om/HhGpjV5QB8i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579806, "uuid": "c74ddd96-af37-4be6-8c85-0cb2248c1974", "value": 622592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579806, "uuid": "b8b277fa-4506-4521-98fd-55e66c1b346f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d166360-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719579911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "3af7cd07-58c2-481f-aaf9-c44b3103e333", "comment": "Malware payload", "value": "9711a6879fb8ee299faa8b9e49c1d0ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "f0008815-dfa9-4c09-acbd-8bfbc256defd", "comment": "Malware payload", "value": "586fd75625039dc9a860c03d2816f8ce8b24e457408fafae77ee2555dd2e9122", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "386a5fb7-8067-48dc-8d2e-e2e945c7dfc4", "value": "T1B253E70AEF904EBBCC6FDE3742AD065634DC954712B93B3A3574C928F21A5474AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "b75b323d-978c-44dc-8c7a-266b85fbe10c", "value": "768:tNaSXe0ede8gekpOZJiZiXipTExP2JgQ6zNozcn3uUfBGLyaDBtwBx00tVA5hIKT:ThURgbYZJiZhTEsJgpgc3BU92o0VAXv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579911, "uuid": "5b009970-f247-41a6-badb-66658e70353e", "value": 64244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "192bdc3e-8387-499d-b91e-73df7fc56da0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d3eb265-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719579911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "6df30288-f4fb-459e-a57a-e379c472ce8f", "comment": "Malware payload", "value": "e80fb1cc8a5b723032ba9e240a802bf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "5b3f5909-ca52-4d1b-89f8-9c21d55425a3", "comment": "Malware payload", "value": "ccec31fa75f31b63eb9d726157c11d00196713d5d0ed929a660c8822cc9a1eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "d5c56754-bf93-46d0-9a02-93144ccafb7a", "value": "T179135A63C9252F5CD15994B9B071CF798B63E99581875FBB21A6C2B98043ECCF2063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "0696c545-44f0-410d-acd2-2063e2d3dac0", "value": "768:zK1sXm0WoMOnxrGeOQ6C7HOtKydXKsNKvepfuajMoJbfdqsQI:zqs20pQY6C7LyPKvepfZj72", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579911, "uuid": "9c0312cf-1ce8-42a6-8327-479418ac0b2f", "value": 42368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "fee288c0-4b96-48f9-9c52-7889e71fa171", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d709903-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719579911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "4e526710-864a-4a88-8bd3-645adbeeeedd", "comment": "Malware payload", "value": "9f14013affdbeede8ba5efa0f6fd6c98", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "7d944aa7-4e89-43e5-99ee-a67953425cfa", "comment": "Malware payload", "value": "450977f72f8382c4bdfd6b266975b630ae5bf72a118ff9fc9831675ad0c0d474", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "5cc4fd8a-af42-41c8-82b8-dd06f638c75e", "value": "T1DA232A95FD419A13C6C16277FB4E438D7B2E4358E2EE33039A2AAF2137879560E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "c9a4fc45-e695-4c21-9fbd-37369cc6e994", "value": "768:oikwbqAfAUMK5J443DD70LL/TODF8Nv1wXMl3w+mxXVYhvTIf:EwqiZHVn0H/TODQplRIX+hvT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579911, "uuid": "aa6fb035-2988-4e4f-aed2-51ea02f75905", "value": 47788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "194b856d-7394-49b0-a2e8-1015053f0498", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579911, "uuid": "7560bdd3-c881-4c13-9895-7ebd0aa6049b", "value": "t18f21a020894c6d2daee170ade5adb127592d31fd35252a4276ffd88e2b728f934304", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ddf9421-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719579912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "9a50c6b6-eac9-438c-bbaa-78dc47f544bf", "comment": "Malware payload", "value": "f44a13f92af6cb3a845506691227bf37", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "9e101993-5387-48a1-909c-e78e9ccd9b4c", "comment": "Malware payload", "value": "df040cbb3288073efdb1a71f3b381dc7fa590e302cd9da7cff376e1fa4a918eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "83cfd6ba-04d0-42d8-a5a1-f8f1c3b696c8", "value": "T188234D02B70C0947D1672EF03A3B27E1D39FEAD122E8E584754EAB8691B2D3151C5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "93c13efd-d3c4-4465-83eb-efd53f8248ca", "value": "768:9lU2r7rDE9Q0QlfHDUYFP/pLXBC396OLc+WJFYOIIg:JrXw9xQ5HwYF2FwZJXIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579912, "uuid": "85a7fbbc-d3b4-423a-a170-386f513c9834", "value": 46856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "26f861e9-74eb-44cc-83bb-36188bcfac47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0de61e45-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719579912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "8a6edd94-69aa-487d-98a9-016b92de6f15", "comment": "Malware payload", "value": "62b18df22411a17a1352e86954e69544", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "df0b4d24-143f-450e-b97e-c0b2f2bee874", "comment": "Malware payload", "value": "0bc235eb58f6fd56550ad3a6f88c51defba271bc23a451b066129f65626d7fe5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "e32d2247-c0a1-46b4-b334-a16ba26fe892", "value": "T13353B65A6E219FEDF66CC2344BB70E21A7A973C623E1D6C4E2ACC5041F6034D545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "962b7ea2-69d3-4f34-b5c2-e6bdf9fbd63e", "value": "768:2EXRJ29JG2xsL9TD0Bh97YtI4oUv4dOZy5uLfkcUeuIJ9:2AfAwwsLp4tdUv4dOtLfseug9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579912, "uuid": "1b7d1512-c413-4771-b84f-4f6fe6b5ba94", "value": 64244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "0fa04622-f8bf-4f68-adca-8819226dec32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "76bd6b00-058e-4267-a626-36d7ba48828d", "value": "t1b9114c1c883823f1d7755c996bddfe76e46071df06225e338d14e55e9a2dd429d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dee7bf4-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719579912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "fffe76e3-4fbc-4e9d-9826-2ab86af5a55d", "comment": "Malware payload", "value": "6c571ba358237473efc936f8db5e2997", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "cdd67613-89a2-4b2f-b273-58ecc1ebaff8", "comment": "Malware payload", "value": "08653785a686a41024c8ac63ef36b88160bccccb625d799936910e844ce894db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "12532387-b646-4279-b9f1-600f01217ea5", "value": "T182333D26FE620C2BC5D5957A71F34735F6F6834A24BC8A1A3DA10E8DBF6464032537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "27718d15-9f68-4c14-acaf-6f896f20a9ab", "value": "768:dijYgR/+s+vc3O+c5ugPUtWtYBns59yw51tQI6L:di//Ewc3UtWgs5/tQFL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719579912, "uuid": "88ab6271-861e-438d-a190-c89693505fb9", "value": 54040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579912, "uuid": "8f2ef861-9ce6-4991-a8ff-e05ee08f0c5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76dd805c-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580088, "uuid": "a939238d-ebe2-436f-ae31-eb470348edb1", "comment": "Malware payload", "value": "a38b878795946d62b85c33e212b1a5d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580088, "uuid": "a90b064f-50d8-4327-b5af-1a057cb049e9", "comment": "Malware payload", "value": "1126eddbb7bc1f4e722908dc2405f6366c3c290a0edc8d96274d810e8c5f5852", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "7be77bae-fd48-465a-927a-274b0e61b023", "value": "T160517AD8329803317FE15A5AB6B58754B4C0F7D25EC24EC6D2EC78BC118DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "635ddf36-4a15-49b2-abee-b97a452f299c", "value": "48:vIK1cIPDcIp7cIrXcIlLcIGjGzEcIyVcIxjcIAlcInPcIVFcI2C2UfcI29cIZlf:vFcocSc0cmcYEcbcyctcUcScDRUfczcs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580088, "uuid": "acd7d4fa-0946-4033-b0ce-325f991112e5", "value": 2821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "35f4dc20-825b-4416-869a-ea73af1f863e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ec62d4-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580088, "uuid": "f1ff7879-5b48-4c44-9202-6f789dfa8618", "comment": "Malware payload", "value": "1150b617c47ffe622cbb040da22d6587", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580088, "uuid": "81b13ff2-c5cd-4b5e-9466-3bb7b7009284", "comment": "Malware payload", "value": "d58c0ea1000cd8322bd961d34ce442c713b8034ba06a4eb8a3ae6a82a275a7e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "11527dcf-45eb-4155-ab45-cb5abc8b4c4a", "value": "T1D6514A95739903306FF15E6AB9B6C294B0C0F7D25AC24EC6D2EC74BC558DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "f6c7cd61-f6fa-4c43-aa32-6e862d3918f6", "value": "48:vIK1BIPDBIp7BIrXBIlLBIGjGzEBIyVBIxjBIAlBInPBIVFBI2C2UfBI29BIZlO:vFBoBSB0BmBYEBbByBtBUBSBDRUfBzBF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580088, "uuid": "74f1fc9c-eba1-4f0f-8490-e984425bb0d6", "value": 2905, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "7744db50-dbfd-442d-a119-d0fa587e61de", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "771474c9-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580088, "uuid": "a3350ac1-d8aa-4ff7-ac37-8be36297366b", "comment": "Malware payload", "value": "c868fda23d4a90410b4960c1fa74ba73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580088, "uuid": "90de5905-ea4f-45f9-abbc-dd3fa51d99af", "comment": "Malware payload", "value": "3cb045a45d1553cf171b7875d3306699c58fa606d40f3392daf48cac59371be5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "927bb265-b3fe-4549-a388-6c5a6e9be094", "value": "T1E55151D4329A03306FE15A5AB5F68294B0C0F7D29AC25FD6D2EC74BD518EF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "b33faf51-652b-4ac6-9a5d-38b0e4acc79b", "value": "48:vIK1gIPDgIp7gIrXgIlLgIGjGzEgIyVgIxjgIAlgInPgIVFgI2C2UfgI29gIZlz:vFgogSg0gmgYEgbgygtgUgSgDRUfgzgw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580088, "uuid": "f69d9929-c461-4edf-a2d7-ae694a64fc72", "value": 2877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580088, "uuid": "9ecc2c55-1128-42bc-ba3e-40c366fc4559", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7739de86-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "622abbe5-9d5b-4001-91b0-95d8ff9c2aa6", "comment": "Malware payload", "value": "0ec26414f543aa631a153395723476e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "1d4640e9-224d-4ea1-b959-338d80fc95dc", "comment": "Malware payload", "value": "3f26444f9b1e6b3ea2f673bacde1bf1a103dd58790336cf39d70cea5ffa1ee0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "bafeb291-f2ac-4af0-a4c8-14cb94dbff6d", "value": "T1855159D833984330AFE15A5AB5B58258B0C0F7D25AC25EC6D2EC74BD518DF0C74A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "21f12cce-bbe9-4a64-aa6f-9e478bfd8187", "value": "48:vIK1KNIPDKNIp7KNIrXKNIlLKNIGjGzEKNIyVKNIxjKNIAlKNInPKNIVFKNI2C2r:vFKNoKNSKN0KNmKNYEKNbKNyKNtKNUKL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "100210b6-db69-447e-a4cd-5be12b75f556", "value": 2863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "7ef39abf-03ff-429a-af7e-8c5374902d99", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7744dc8c-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "c5b087bf-8da6-4a0d-acab-8f795c949af9", "comment": "Malware payload", "value": "16f001d7d46bffc84d6e04e6c5133178", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "45318e38-0f97-4aa3-a251-35b2c9bf2300", "comment": "Malware payload", "value": "ea2412eedaf1750a2f19d8f9af55667cacf2224f3450fef36cf66e89e3fc6b9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "d1273d2d-4112-4150-96a2-bf7ec6a2d1b1", "value": "T123518AD9729807306FF15A9AB5F58298B0C0F7D25AC24EC6D2EC74BC118DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "7f60a9fd-0349-4f35-afa6-16730c332f32", "value": "48:vIK1aIPDaIp7aIrXaIlLaIGjGzEaIyVaIxjaIAlaInPaIVFaI2C2UfaI29aIZld:vFaoaSa0amaYEabayataUaSaDRUfazao", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "46a20d17-328f-43f4-a449-c3b88837e9ad", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "332ed79f-076f-442a-b816-4f3a065aede7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "774869ff-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "100277dc-ddea-4f62-8936-ca48ae3537aa", "comment": "Malware payload", "value": "6414c53eb21aa7ea13eff86f184dc367", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "ae7b14d6-6180-4183-8b03-433702ceb039", "comment": "Malware payload", "value": "aabab735637ac51b422d4a29045a493e03ae803a93776d482d6c70315c734793", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "74ba66aa-ba21-4bd0-b678-ac3f5bf475d4", "value": "T1C75157D9329903346FE15E5BB5B58254B4C0F7D25EC28EC7E2EC74B8118DF08B4A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "d597cf4a-001e-4fe4-a3cc-66423dbb450c", "value": "48:vIK1oIPDoIp7oIrXoIlLoIGjGzEoIyVoIxjoIAloInPoIVFoI2C2UfoI29oIZlL:vFoooSo0omoYEoboyotoUoSoDRUfozoC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "5c1c7f87-de42-4c39-8cef-e6db953ab5cb", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "392371d0-6c2b-4b07-a363-c8e3a3255cc5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "775a9cb4-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "132fe047-5b14-418d-ae38-0b348cb7b9f9", "comment": "Malware payload", "value": "e2a8ead15ef7f845001becfadb890b20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "ee51c744-377e-4eca-a15b-b530ebbe548a", "comment": "Malware payload", "value": "d351fc195cfa35d672da3443c4ebd71718854c2d597849b9118e6da1c6a39c62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "5e42ffa5-e1b3-4288-acef-a897f07a8ca8", "value": "T182513B95B38407316FE25F5AB1B4C644F080F7A35EC15AC6D6EC78A9948EF0874A2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "e629db56-c746-4e1e-8922-2e682e64669b", "value": "48:vIKARIP4RIp0RIr0RIl8RIGj8RIyToRIx8RIA0RInERIV2RI2CMRI24RIZ2e:vydfR/kw/W1DDHE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "1abe40f5-badc-401c-863a-ddf873b71bff", "value": 2723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "3549aee1-e49d-4b6a-9c51-c87c97a46c48", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7763e7fe-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "c9ccd456-f55f-4b77-8bc0-6b06994a4f76", "comment": "Malware payload", "value": "19ad3ccae784a8a0dad58f7c085d9e57", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "5e8d8f54-dfd7-4b37-afcb-467600c5b6bc", "comment": "Malware payload", "value": "fc4029d91b8c3d880bb55d708301116c6ef13c60146943a9a168a5f5ac267bcd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "847696b1-9f95-46e8-b34f-b8e73af2d240", "value": "T1D8519AD8329913706FF15A5AB5F58648B4C0F7D25AC24FC6D2EC74BD128DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "1b72dd91-bad9-4f27-b2dc-06140125607f", "value": "48:vIK1UoIPDUoIp7UoIrXUoIlLUoIGjGzEUoIyVUoIxjUoIAlUoInPUoIVFUoI2C2i:vFtotSt0tmtYEtbtytttUtStDRUftzt/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "3c144b93-0684-4e2a-ad27-1e7fc6196acf", "value": 2863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "3a646ff0-4a20-43d0-ab52-ad2292ea6ea2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7773e421-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "8191705d-7377-4148-8589-a84432239471", "comment": "Malware payload", "value": "23f9f77480caa4127cd6d137c8ce7170", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "2d367a03-419a-4d22-8fb9-c67307b250c7", "comment": "Malware payload", "value": "14e55ac4879c6c893ea944dd613afae77a79d48cfb479f642943efb5c2483f41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "461a3116-efbf-4929-bdcd-fe3a23fff546", "value": "T123514BD8329807316FF15A5AB9F68294B0C0F7D35AC25EC6D2EC74BD518DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "550802ec-6590-4818-864e-d0a7fc7879d3", "value": "48:vIK1WIPDWIp7WIrXWIlLWIGjGzEWIyVWIxjWIAlWInPWIVFWI2C2UfWI29WIZlZ:vFWoWSW0WmWYEWbWyWtWUWSWDRUfWzW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "0f67ba5f-df9e-46be-a890-48553ef2795b", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "9a41f4d3-d6cd-401e-aea4-fc6802daa428", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "778a13d3-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "fbd4a2c3-d670-48df-a64e-bb3061919b82", "comment": "Malware payload", "value": "7e055e77ab53366d41c4ac527943fa6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "9f3e1920-dc62-41a9-b297-c85cf340b816", "comment": "Malware payload", "value": "e5cebf50f78c091c7c9b646c3cb3a4c2809a19e4ed85203286dfa7043e7c2c34", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "c0a62931-a274-4780-a85b-24879cbbcde5", "value": "T10C517BD8329807306FF15A9AB5F58294B0C0F7D25AC25ED6D2EC74BD518DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "fdfb9636-bc1c-425d-961c-dd710e305266", "value": "48:vIK1SIPDSIp7SIrXSIlLSIGjGzESIyVSIxjSIAlSInPSIVFSI2C2UfSI29SIZll:vFSoSSS0SmSYESbSyStSUSSSDRUfSzSm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "8eac2d0e-eb93-4760-bb79-a1fc87a20de6", "value": 2849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "85e930cf-fef9-4002-8672-aaf79b313df9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77981be6-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "a48bcad2-f150-473a-a1db-7e7fa5b9f769", "comment": "Malware payload", "value": "e1975443ab0c7a506d1a721b7a52ef6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "5a66f5bc-d3ba-472d-a2b8-2723bd5cb867", "comment": "Malware payload", "value": "c67b216152e9ea10a2539958297319f1bd7c6aa0f2af78d744d88c853d6df5b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "284a1d81-f612-43be-91c0-94a09befd170", "value": "T1645171D4329803346FE15B5AB9F683A4B4C0F7D65AC24EC6D2EC74BC158DF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "802b5086-575a-4014-ba5c-b7fa0557df09", "value": "48:vIK1HWIPDHWIp7HWIrXHWIlLHWIGjGzEHWIyVHWIxjHWIAlHWInPHWIVFHWI2C2p:vF2o2S202m2YE2b2y2t2U2S2DRUf2z2C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580089, "uuid": "85d0fe51-574c-4b70-ae19-c65d2304e813", "value": 2849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580089, "uuid": "21e12fd6-6eb6-4657-9613-da89847b1a2c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "910b4e3e-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580132, "uuid": "e2876149-d881-4648-8e51-948641e24fed", "comment": "Malware payload", "value": "6859550f89b2bb31b245bd4f2d3635f8", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580132, "uuid": "29a25651-48f0-4dcf-8ff6-e78c8aecf6b5", "comment": "Malware payload", "value": "76e7619afe9665f9d0d7571dcecfdd420ccaaf66c9a2a867657bb18432b03535", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580132, "uuid": "3ded4d6a-4a98-4edc-9727-79adcb71ce78", "value": "T1BD363313E2ED21BBC4D2C830390D71A1435B662D9E6331446E7F664FCEBAB65314BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580132, "uuid": "999ac99a-79cb-4bc2-8078-dbd538f481c7", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580132, "uuid": "d74233a2-21ae-4602-8b39-30e839d29eb4", "value": "98304:CerLJPINIVBqvOVc0jyhVeSt6lRb8VddJ621ljzWNGI3QQxj:lLJP7QvP0jMoSwRAD62nWI4QQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580132, "uuid": "956bf78e-8f7c-4475-a339-3ca59f719f5b", "value": 5282907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580132, "uuid": "382d16f3-7a8c-4eec-b492-53f27c6d987d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99fb1eec-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580147, "uuid": "4e1a3525-19d3-40b7-9228-ea30c8309ec3", "comment": "Malware payload", "value": "882df871702c2f44471f7897dbc354ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580147, "uuid": "084ced82-7e64-4a9b-bb12-c3d947dc7458", "comment": "Malware payload", "value": "6e15259bce8a88077016e12825867a6ab07243e2d291528915fe1c59422e67b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580147, "uuid": "fa200aa4-214b-4046-9420-887628bce03c", "value": "T182517FD5329903706FF15E6AB5B68644B4C0F7D6AEC24EC2D6EC74B8118EF0874A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580147, "uuid": "294d111d-07b3-48c1-90ad-adcf2161f1b5", "value": "48:vIK14IPD4Ip74IrX4IlL4IGjGzE4IyV4Ixj4IAl4InP4IVF4I2C2Uf4I294IZlb:vF4o4S404m4YE4b4y4t4U4S4DRUf4z4a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580147, "uuid": "bd5a5890-508e-4967-a258-00751e9e445d", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580147, "uuid": "fe618404-9fbb-4176-bcf3-502235ba03ef", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0131204-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580211, "uuid": "ea200303-5da9-4caf-abd9-44b5ad14f8c1", "comment": "Malware payload", "value": "0a30e798933259431f02ed67c3e5025d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580211, "uuid": "ad2df726-d018-4a1f-9e99-c7ebfa1c7b76", "comment": "Malware payload", "value": "914a8fd28272c12736f1fab0f0eb5fa6583e75d4142ef650187420fb9bf555dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580211, "uuid": "a83f6565-ade5-40e6-8839-432c978ce731", "value": "T10003D7967C834E1AC5D452BBBB3E12CD332563A8D2DF7353C8208B147ACA91F4E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580211, "uuid": "0943d260-1947-4e74-93d6-8ebc0426fd55", "value": "768:ufsZikGL/xoYmxK30gl5zqH9SQ6P6ZJtbIdGHk5YWXJwkRhllpz9sJ:uEZALsxKkDHFu6lIdKW2GGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580211, "uuid": "3d90f76b-a884-4919-8b9a-8aef70ead07f", "value": 39804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580211, "uuid": "4e859902-2728-495f-be2b-035f61d7a623", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580211, "uuid": "76818801-159e-49b0-bbdf-f380759dbc07", "value": "t1fee07d00fc75871898db9a74ddcd07b4a901721254578f04cf10d6f0d83f444e708d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72af01f0-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580510, "uuid": "079c9e58-e00a-457f-9e92-7cea2b6b6d3c", "comment": "Malware payload", "value": "9948372fd360d0c121597e67a9c63f35", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580510, "uuid": "11fd8b5a-9f67-4e36-922a-83fe2ca10569", "comment": "Malware payload", "value": "b4c29a1301820cfd24ec0c3a667bd55a9a60e1bd51ee5836ba53181f57fd84a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580510, "uuid": "abc40d04-597e-4f96-ad46-abdf1b8bbc06", "value": "T12A21918F96509901814CCEAF736F54AC6139D5CF60371F9BBCCC88BE84CAF48B451A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580510, "uuid": "be37eaa7-5158-41e9-b2c4-08821aa8caea", "value": "24:e1ln9134p1668r1vItw1XYm1BNI7KS1RKRi1A1Ny10eb112dy1UC1J6KN:e1V91Ip16Zr1v/1Xl1871Rp1Mw1hb13L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580510, "uuid": "087b6929-df33-4064-a5e0-e91fc440dfd7", "value": 1275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580510, "uuid": "4cb80fe8-5e7d-499d-8d77-6b54347ff8d2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72bf4611-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580511, "uuid": "e60aaf2c-bffd-4481-91eb-eaa4c6534553", "comment": "Malware payload", "value": "648d20be87fd621a45f8eb9b02ca9728", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580511, "uuid": "b6fee1f1-f34b-4c8d-b435-79d24efde8ce", "comment": "Malware payload", "value": "deeee5349a34ba7d3cc2d742b81395ea88c19bd802031454a140cd4986d38c79", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580511, "uuid": "d52e6325-a04a-4dbb-8e76-6e91f7ed784c", "value": "T168D33A17B6D1D0FDC8D9C1B44FAEE13ADA33B52D1134B25F2BC4AA222E59E205F2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580511, "uuid": "2d55a20d-ff6c-417e-8b80-9870ba868630", "value": "3072:uny+b833I7w3hgCVcvex+4i9H+3Y49ZTaTdM:uny+433bq+zaG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580511, "uuid": "ffc8a1e9-f0c9-40c2-b8c3-15ee89d4d490", "value": 138920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580511, "uuid": "d08717b5-c231-4783-9aa0-95a34640fbb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580511, "uuid": "a78bf77b-e1c6-4f7e-bf04-d3f79c256777", "value": "t1f451a8b03d5a39e4e1ebf677b30be56ac8750a6005e031e2d8b26ce5de51b800d728", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94dd544a-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580568, "uuid": "6a98c46f-6360-4146-8e7f-c4b108628478", "comment": "Malware payload", "value": "58c4cfcac52b74bebb5a6da13c21d546", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580568, "uuid": "8b8b55eb-b469-48ae-81c0-371aaa0e34e3", "comment": "Malware payload", "value": "5d8fbdc91453388e9c2345d0a87dcbdcba84b6ae4c820dcfc239a2f3a324eda4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "93235152-ccc9-4cdf-941d-b125854cc9ab", "value": "T1FCC2E896BCC29667C2D0537AB76F478C339277A9C2CF3717D80527103A8AA4E8D62B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "91cf04a4-95e6-4baf-8e1a-d5a31c2b0b6c", "value": "384:Ryef94iQKbS3WwsoFcQC+48tG5rtlC6jclJfPtcKbFo6biMPaLrybm24LopCX6s8:RyS/HbS3W3oFOEG5rtlC/btbuE4LopC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580568, "uuid": "1c5b5732-aa22-4a94-a34c-a348e02af643", "value": 26484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "59ccb50f-a843-4431-894f-e3011c989d1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "7e686395-bd45-4d18-a976-ca4a24206357", "value": "t1e3e06801ee7c8e1d88f34a70cc890bb180130116a1220711cf54d9d4883b554f10ce", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95042f96-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580568, "uuid": "852951b4-4e9a-4732-912b-ec8705c2deda", "comment": "Malware payload", "value": "9810abe8cf0207a21a7a118cc64e5208", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580568, "uuid": "78aaa015-accb-41dd-920a-5924df6a6a98", "comment": "Malware payload", "value": "e7b92701afb004f27c96dd18c563ddb971473de4159d541ad061e374e090a34e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "8c058d45-018d-4b3c-9b8d-940b2aebc102", "value": "T1BCC3F749FC515B13C6C612BBFB5E428D7B2A17A8D3EE720399256F60378785B0E3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "4d0aff62-55ef-4ec2-b3e5-cf1d42346467", "value": "1536:uB25fCMg7yfFxAdZ54VPkOeITsxwZuusO4Es6/+/O1l1h5wywmO/BBBcsLpuTceS:uBkIoFxy4eYQxwZuucIk67e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580568, "uuid": "8f46f831-fd1a-4acf-9939-a7a7ab1486bd", "value": 129420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "e0f6e9d0-7f24-42c9-81d4-7630f5238089", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "b83c60ea-be39-45d6-aae1-4c493a29ccc1", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "951403ba-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580568, "uuid": "99c734b8-c1a3-46dc-9678-8121de2d22cf", "comment": "Malware payload", "value": "b90d091475cd0ce3f4311833b558c511", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580568, "uuid": "fd8782d1-1015-417a-90a2-e0ec7c376dd3", "comment": "Malware payload", "value": "0061f5458f5410541def063abbea6abff9c812929fd279e7203aae5a7c3442d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "2bd8ae62-734d-49de-b7af-9551652a565e", "value": "T11C04C80AAF660FBBDCAFDD3706E9070135CCA50722A53B753674D528F54A90B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "0765364d-94b9-4aa7-8d4c-d8ecc933faf2", "value": "3072:jy3lvGyOz7HQdFD8bPg/lzb6vsOd+UtJ:jy3QyOzAFDG+xeEKBt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580568, "uuid": "00a90275-b8d2-4494-a215-9c5ffaf48684", "value": 173700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580568, "uuid": "9eb590ce-740a-4f2a-98e4-3557bc407200", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "954b9f6f-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "ca017fe6-23c6-4c62-8bca-57cca1bd13df", "comment": "Malware payload", "value": "268dff251671803a83cddf55a63beacd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "67c8089c-1313-43b9-a3cd-17d0faa6da24", "comment": "Malware payload", "value": "552e7d9fd74699b15a5f405ea10e38479d99430c1073e171c88572b9ee393b8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "74f56a4c-8734-4a19-9837-f7cb8c4a1f01", "value": "T122D3F856F9819B11D5C111BAFE1E128E37231B7CE2DE72029D246F747B8A8BB0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "37a4c340-aa61-4c05-88b3-e9d3fe714046", "value": "3072:hOHQ+UfW4ybXRwLdru6avBBeXbhq7xnCVpUeOb:hOLI+bXSLV9aHKhqRApUeOb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580569, "uuid": "f3867a93-7919-40db-a558-406020b6983e", "value": 141776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "c2e6cb76-932f-4101-8480-949f6ba9459f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "e9be46c2-90b9-4fc3-92fe-c2b3d19370d0", "value": "t1f10120d74faa12dd1ad4d21cc11bb91c225176fa4f383878c96ba5c209438c1b0155", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95abfa9a-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "72e43651-ce81-4f83-83a6-d74ed981c3ec", "comment": "Malware payload", "value": "f0aba12a4700fc3123d210c6e7d95324", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "e894d33e-0eff-4370-8de8-79673d3a8d94", "comment": "Malware payload", "value": "a3c7446f89cf1bb8667b4314e8d888c1a51047471a5ecb085a934ca7a32a61ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "c0178b3a-c5e0-46d9-b885-cb34ccc81994", "value": "T112D33A17B6D190FDC8D9C5B44FAEE13ADA33B52D1134B25F2BC4AA232E59E205F2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "3c0af993-f69c-4195-95ea-30a08e5d81e4", "value": "3072:Qny+b8Y3L7o3hgCVcveRwt4i9H+34G90yNTWDG:Qny+4Y3smt+nNp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580569, "uuid": "712e052b-16bb-4ded-b173-3a11c58cb573", "value": 138920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "c2b85303-6ba0-4860-9a32-8400ff2ec58e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "489c3b35-e2c8-413e-a0e9-fc599a187b79", "value": "t1f451a8b03d5a39e4e1ebf677b30be56ac8750a6005e031e2d8b26ce5de51b800d728", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95bc04e8-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "6f1519f0-dcf8-47d4-9973-3fa1d9e56525", "comment": "Malware payload", "value": "794b99a3e86c4e1182d7ee21b7da8cb7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "e2efd31c-ac32-4f1e-8a0c-291fa606c6e1", "comment": "Malware payload", "value": "9e6fd1d46b25e468815636fba2d609631d6e6356a9ff51a626032fc0cc3afce9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "6c32b20f-a8dd-4ea4-920f-090bcb0a442a", "value": "T1B204981E6E228FADF668873547F74A31A75D23D622E1D684D1ACC1106F2039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "fcabfe25-4c89-4966-97f2-9c016b65bd92", "value": "3072:vKqYmrL8THS6f+uyeXeLlUfz4Fts2m1Pk:vKqY8qy6rf6tsF1M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580569, "uuid": "8eca049d-e4fa-4e75-a4d6-85b13edc0d6e", "value": 173316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "fc25ff10-c036-4b14-8678-ec3dea6eefd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "7cbf865e-3a6d-4012-a1f5-de017439e971", "value": "t198417518097407f0a7656c49099dff37d6a331db7e176c378e11e4aaab69a839e20c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95bc90ab-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "aebd5eaf-2a5f-47bf-9212-def28db330ea", "comment": "Malware payload", "value": "c9199194a00f30c8c28f90b8d6701bf1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580569, "uuid": "f15092e4-c30b-40b3-a41a-59e115d55e02", "comment": "Malware payload", "value": "1415214944ee1ee29075dcc539c43a538ef2db7ca8c857b1bb7379663b7f7350", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "866aa34a-73b2-4628-90d3-12a0a77d445d", "value": "T117042A46EA404B13C0D627BAFA9F424533239B54D7EB73059528AFB43F8779E4F225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "e3c9e821-30c1-4b1e-995f-c717a46f340a", "value": "3072:lfm6wBnwyiKj6Xa1AQimt2NnvmA5gGOC+XPSorM/RTfmpFA:lfsnwB24a1AQimtkOAOGOC+fTrM/Rq+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580569, "uuid": "bce8af10-6ad7-4953-9e1f-7c19a827871e", "value": 180479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "1637fbbb-bb23-41bd-a9c9-60eba69d2293", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580569, "uuid": "e05ea14d-dba6-47e2-8847-00d6671b473e", "value": "t10831bea2866c1126aaa1dc28ede997b2551b86261350be36df22c4cc680f44be537c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4a8e8a-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580746, "uuid": "6349c8d9-8c1b-4b39-a8ca-6112cfef8fbe", "comment": "Malware payload (Mirai)", "value": "beabc198a5b957059c3f58b8c01a781d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580746, "uuid": "fede2b64-6451-4286-a340-160eb301e8a0", "comment": "Malware payload (Mirai)", "value": "19a685dc4f1ccecd0360c501ff6fc63e161e6a0010e9cad3dab846c2e7dde95c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "a56fd7f1-eb88-4ea1-9172-664d1fe07195", "value": "T141F2E891B8854727C1E41379B6AE5A8E377073EC92CBB62BD8224B207BC591F1D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "3bf9b43d-5c97-4170-b535-b6b0d9226782", "value": "768:VxwgXqSoG5M1ImBHGaBwO3iRtWV5za9ZSFH/3RCTXpoc+tSwn:VRqZG5MRxGaeVKSUfB+XYn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580746, "uuid": "3bb8e4cb-17f1-414b-9888-3ccd4534e96f", "value": 34864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "a3520b0d-8881-47cd-9e22-1afde8fc8a87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "c9f2b9a3-3ce2-45ff-bcaa-5289b85bd757", "value": "t195e02600fc748a1888e65ab4dcdc0764a501121360575b20cf51daf0cc3f844a708e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff585f14-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580746, "uuid": "a0310b60-71ff-41ca-b2ae-178b30632939", "comment": "Malware payload (Mirai)", "value": "d0b2f3fbc3218a6a2ed575a86159b812", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580746, "uuid": "85877f6f-3c8d-40aa-adb3-b6bb258680fd", "comment": "Malware payload (Mirai)", "value": "8bd85312a6a6d72f2f64df672a38be0eaf2c0d201f1143e32d833f2088744806", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "14bb38fa-5c1e-48a0-af96-1fe337387920", "value": "T19C73C61AFF620FF7DC6BCD3746A8170239CC554A12A47B3A7534D828B65B24B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "77a962a6-2fa0-4e05-a0f1-20e30a3cfae3", "value": "768:K3sJmkqQlhWHgJvd8p6Ea5Des4ReDB2wJ2iwgugBI2ZpMIXi5Ij7+eOcIoJhwnAS:KcJmkZ1R5B4RcBvC8W2ZpMe7+pcI3nA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580746, "uuid": "192ea729-0a5f-47b7-8f0c-e263acbe7b81", "value": 73796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580746, "uuid": "98dee47a-7d91-46b9-9828-8e640ca76499", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffe9bb24-3550-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580747, "uuid": "271f0877-93fc-45e0-bfb7-d9d407d101c1", "comment": "Malware payload (Mirai)", "value": "2ad516b660839a4019a17cc600f591c5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580747, "uuid": "adada327-0c1a-4180-9732-0ed6202df557", "comment": "Malware payload (Mirai)", "value": "c54473c3a913eaeaefd597fa916aafa117f880fa34625ce1d49c872dd6177319", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580747, "uuid": "d0990d36-5bde-4225-b2be-dfd033541549", "value": "T1F1E2E03151B2F8B2C4E62C32DB3DC68111770BADC6F837252340955CF9DB69AD634A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580747, "uuid": "37b0bd74-6810-46e8-96f6-e03e2c221e99", "value": "768:Fkh3G0p3VhU6kv34Wm1RM5LWWfgs3UozR3:FUWc3fg33m1RM5LWwzR3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580747, "uuid": "2bed9825-ead6-4aa2-8b59-5488b75e99cb", "value": 31852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580747, "uuid": "421a3b56-6e5b-48e2-9b4c-edddcf76efaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580747, "uuid": "02db942d-90a2-4e8f-8bc2-201f47693bf2", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00348081-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580748, "uuid": "93020386-22d0-4d74-8c03-44fce9a49b97", "comment": "Malware payload", "value": "c66f5537daaaf784e1407e2721763836", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580748, "uuid": "fb04fd3e-cea5-4637-be4e-633e0e1b3f7a", "comment": "Malware payload", "value": "19f63bfcc932efc529a291e2bbda7e6695881e11e840c411c255a6160068d2d0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580748, "uuid": "d196f397-748e-4f9f-8228-7a8e16f844e0", "value": "T165630956F8814B22C5C5027AF92E118E332357FCE3DEB2229D216F2077C696B0E76D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580748, "uuid": "7d551a1a-21fd-4816-b349-280011e143bd", "value": "1536:dpnqh/sOR5YbAP+uppI46EFq1aHg1zGI7ic8I2+lhCS5bYonR:a/9R5MEzMaG8I2+lhCSRBnR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580748, "uuid": "6597f621-a773-4971-ab27-e97d3006322e", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580748, "uuid": "492df2ac-7238-4eda-a04c-e006eda9b3f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580748, "uuid": "24cb9cb7-c492-4b02-bf22-53d5a196e124", "value": "t175016d002ad48ebd8fc14189912f116a8e643575697728445f6e694fdb224a670b08", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00fcf195-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "e553ae92-45f6-4360-9e8a-c58a34e3102e", "comment": "Malware payload (Mirai)", "value": "21d0d845b05b2f50ae70430410421728", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "d326ecf8-c5ed-4fd2-93da-48182c3c7406", "comment": "Malware payload (Mirai)", "value": "85f34517f4cfe51765c7e370927e5412ef0b5a905f6b8d923047148ae7635e2e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "b5f7fcf2-6894-47ad-883f-f1f93559deb9", "value": "T11D434A50F8819623C6D1127BF66E468D3B2613E8E2DBB3079E225F2037C686B0D77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "b197dbd9-927d-45ad-b077-b2e3ab9c2c28", "value": "1536:pjzQgyzv4qsU9KhU+0FVL2g4TtiCsyXvqnM:pjoy/0vLh4p9ZqnM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580749, "uuid": "c8f5bd6e-7006-4f8a-be17-65e4d4478bd7", "value": 59640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "72ef5caa-4511-4a10-827f-244d2eecf1da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "a21be4a6-6428-4f20-85a6-76fb22f8e36c", "value": "t16f2162248ae909ec2bd0828d435697776d8a30748b933412cfba6f0f4b0bdb534764", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0104163d-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719580749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "8cd83e4d-da31-4357-b377-4e01da3a5f14", "comment": "Malware payload", "value": "e3648f75be5d5ec5d36b81dfdcc55144", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "80a211a1-5a3b-46df-a480-63a30b752984", "comment": "Malware payload", "value": "985ccea4cd08530defcf3ada88983da5716382142512ec38a18941199f141907", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "1563623e-9d82-4757-be07-4fd10cb84beb", "value": "T1C1330907F681C0FDC49AC174476BBA3AE93771ED0238F2A67BE4EA223D95E611D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "97e9c7ae-3828-4166-ad07-007918a08fc2", "value": "1536:Ru31CxXVpHlCrxsNnVfvj5N+Hf2r4DaEXzd0OCUjCY6:Y1sXV5lCKNVfvj5A/0GaEDOVUjCY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580749, "uuid": "b09d11f3-077c-4278-9e8f-74b19d7561de", "value": 55104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "211d2bbb-fd5c-4255-a202-582c261cc92a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580749, "uuid": "79dec376-2f95-4790-9dcb-932db2151f0c", "value": "t1931133f8bc215990f2ebf52ab70bd1188cbc2aa500c031f1c5b6b4f6bb52b460931c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0130b0e4-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "b5fa20ba-d7f3-4dc7-8ef7-f8f8ed66a828", "comment": "Malware payload (Mirai)", "value": "7d47e18b5cd06b76914f32a1cbfd5ea5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "04ded46f-df58-4594-b2d6-7e49b6753cf9", "comment": "Malware payload (Mirai)", "value": "c61999db02a82e55b52f21c2b177af0092bdf41e6ebecfc7707f2fceb24672f4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "3a273b81-d657-4efb-9145-f20502b74853", "value": "T1CB63B61A6E628FBDFB59833447B78E21AB5823D527D1D641E25CD6002F6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "45732350-c6d3-4000-8a9b-8da9cb388e6c", "value": "768:bPWek0n4CjdGQKKWYmg0EhFkFkeYA+QoydFXyApGqFDjOZ2uyyQ5NeNTP4wn0IZ:bj/hnmmjAoUdym2Uu6eBPZn0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580750, "uuid": "fdccc99b-eb78-4e9a-a144-00f27658528e", "value": 72628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "0346c445-aefc-48fa-8daf-334aeb9e949b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "ad552a4e-f1c7-4e7e-ad0e-dbd5aae3c7ed", "value": "t1fb112948883813f4d7650c9d6bedff76d05160ea07164e378d40f99e9b69e429a00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0132afb7-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719580750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "a118bbcf-a94a-45b8-b5ac-9ad63ec17b13", "comment": "Malware payload (Mirai)", "value": "3fe4450184a9f9cae51109ead408c0ef", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "f047aaee-1ab8-46df-a549-6cfc82640abc", "comment": "Malware payload (Mirai)", "value": "7cb79fee28b42b7cab9d74274a01c58c8cd318c1cec61bf4f7b8f921f5bf938c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "8be8bfbf-733e-4c47-8efb-297ac4ee8c1d", "value": "T1B7D32A56E7408B13C4D61775B6EF42453323ABA4A3DB73069528AFF43F8279B0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "104c05af-7e94-4926-bfa6-06b83ba934c1", "value": "3072:lS6VGvL5uazAFEsHYw3NK8YwxGnwp+SQkM/9CH:lS6V4uazAFEs4iNNgnwp+SDM/9CH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719580750, "uuid": "d8e0cc76-f64b-4791-8464-1403e14b98b7", "value": 140758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "89535be0-6782-4088-875e-3e80a203c25e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719580750, "uuid": "4487391b-0ba8-46a8-b1fe-5eab567fc02b", "value": "t1cd21f0255765a1199ea1dd54d8ed87b2162887232344af33de36c4cc68060daea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa4348f7-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581167, "uuid": "bfc5a933-a5a7-46f5-846c-f491a374bb0c", "comment": "Malware payload (Mirai)", "value": "9929c883706f527e9261ddada3056759", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581167, "uuid": "5e86667d-8be9-4e26-b656-27db49035ee7", "comment": "Malware payload (Mirai)", "value": "8c53b66b66fff41a00089963659f503ccbdd21b99b1cbec2ff4e7ebe87c65bd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581167, "uuid": "cc53c190-f114-476c-a92e-1ff3d8c8b349", "value": "T13631F1D153E05DBDC8E415BEAE6BC310B3A89F44E1CA7123930C73287D1AD7C9D260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581167, "uuid": "8134f40e-2ad7-4a5b-a223-9e2837900b8f", "value": "24:cc5KGpa7Urz/jlfIOXK1G9Vev3gRGD9i8/NBuLlp/v9gOuN:cc5KGpa7UrLZINR3dNBur3hC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581167, "uuid": "7533d805-e7bf-4072-b2e0-f10afb8b6580", "value": 1480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581167, "uuid": "53d13361-a75c-449b-aab5-f90495b9b6d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581167, "uuid": "893d88a6-eadc-41bf-99ff-07be848dcaac", "value": "t1cb900262474fbb68b245018048c90104c5e4e51b0460986145491c404852a1075102", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa597e2a-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "59f8cb2f-0fc2-4e4b-aa85-c438953f450b", "comment": "Malware payload (Mirai)", "value": "bd2b29c84b35563b801e7ff7095e4da7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "4acc0cea-745d-48a8-aa60-6604e0d507a1", "comment": "Malware payload (Mirai)", "value": "19bf023efc765afce44b15293c47972ae744d7372cc9849f934da1a2f646bc8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "b1a4c1ef-94ab-4c77-b221-04278133d4eb", "value": "T1EC21119153D05DF9CCE491BFAD564310B378AF80F0CBB663A2187714BD2AE7C5C260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "634f8835-d71a-4645-93b5-51b83f7e1f2f", "value": "24:rKGpa7Urz/jlfIOXK1G9Vev3gRGD9iMC/NBu+GClxrR+zbeSRYt:rKGpa7UrLZINR3iNBu+TlxrsbeSRY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "898ffe24-48c1-4fc2-ba2d-00d9967fe28d", "value": 1436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "7b7a258d-3463-4ea9-98b9-b2ce876bd748", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "f1c8fd59-123b-4fbb-a7de-7479bf7e0144", "value": "t1ff9002264f1f88509650020c84e50651c8d4d2530a0068d4499d0e00855291074642", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa6ad1a3-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "77b39bb5-7a10-4490-bb88-7b14c79e17d2", "comment": "Malware payload (Mirai)", "value": "6973c00e2dc2f84469027c0b4cbf71d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "269dbafc-04bf-49f1-8c86-a6337a667973", "comment": "Malware payload (Mirai)", "value": "181ba41d0579d05dc39677385622a23aec01cb3d3bcd79488af3d03fc69b33f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "bcf553ee-6d44-4407-89a1-30bc10ec65b8", "value": "T18621119153D05DFDCCE491BFAD564310B364AF80F0CBB663A2187714BD2AE7C5C260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "47bd04c9-6fb4-4629-a8cc-43d8f8cdc961", "value": "24:rKGpa7Urz/jlfIOXK1G9Vev3gRGD9iMC/NBucllxrR+zbeSRYt:rKGpa7UrLZINR3iNBualxrsbeSRY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "754b6fdd-bb8c-484d-86ce-62a085e5dd04", "value": 1436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "45c41247-77a3-472c-8d14-1ebdd9653a53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "f42c9249-2f0d-43c4-a6d4-2340df1c2214", "value": "t1ff9002264f1f88509650020c84e50651c8d4d2530a0068d4499d0e00855291074642", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa732b92-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "0596f4f5-9244-48d5-bf61-85c11ad242cf", "comment": "Malware payload (Mirai)", "value": "ff97a23d0ba754ce2e43e5c5b572e2f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "09b951a2-5014-4586-ac5c-3ec980a3a86a", "comment": "Malware payload (Mirai)", "value": "58a916dc6c2cd1d8e51353b2c78d1beb332ee6483f0aad2daa3c39088e18f63f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "1f78edcb-b8a6-44e8-aa87-a3734f719ab2", "value": "T1A241DECE1B759EF8F0A9D53887334B36679A560903D04246E2FCE9001ED034E859FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "a0799ef2-9b57-47ae-ae88-3f951d2e3cd6", "value": "48:2zpNINwfiPEY4iyD4qJ/EYEfXWlrhJSXV:cp2W6s8G/EYEfWlrhaV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "1adacbb2-0800-41c8-b06f-b211ba12f98a", "value": 2048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "21c59ea9-eb7a-4021-9a21-eb3952200e1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "57f37524-164a-4543-b1fc-efe7fdbcfd1c", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa83d48b-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "ba3da8c3-d491-4d3a-8563-dcdbfbd4c455", "comment": "Malware payload", "value": "cdb9185234bbd5f77cfd1d2a0115adf6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "a1b3a437-bba8-4319-a2c5-48ae5ad18b9d", "comment": "Malware payload", "value": "7b689778e29f9bdb249748a3c0db49db53d150d85031dea3dfce7f9dec68ee92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "8a7d1f08-c07f-4c53-a3e8-ef5ddeb64939", "value": "T1CC63024C61AC35DACBEFA13E905C525BC505602CB3898BFD6D3A4AF07275ADA3B081", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "66f00132-8e1a-4d99-a6da-2cddbde5db0e", "value": "1536:jlhtexQu0V0CG3PD/Qf7y34gQgNKF5giT6ULIxukIQND:jlhIxQ1CZLQE4gQgcF5giT/Exu8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "e460e25f-06db-4647-9ebe-4c22a28e7e2b", "value": 68668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "df3f1146-d8ee-4fcd-bdcc-58be8efed687", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa8c0cab-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "2590a103-994f-4aef-acf9-e0999b89bb33", "comment": "Malware payload", "value": "aba3f32359b032fb65b1d86b9dddf223", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "13897529-688f-447d-97f0-335e9992cfe8", "comment": "Malware payload", "value": "413fe45de075ab6045fc1a11eb7d3671e89f84a927e1db0ca27323ab82ffba68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "77a180bc-79b4-456c-b72e-153ae06e16d6", "value": "T16B33F14EDE887ACAE0496D7E7509231E0ADA827617F969ECB314C90DBBC3D17A1C01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "fa2e3dca-4464-4187-a108-b4fb76cc1fb8", "value": "1536:xoazNZdmHEvO67lrlvbbSxE0fvrt+XXSN8:xNZZKE7ls7ay8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "edb70cdf-929d-44d8-9ded-b9636be8d462", "value": 54868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "1f2b201a-0a09-4cf4-b9df-a8bfea64ceb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa9a3a41-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "90850a45-f94d-41c8-8366-019b5814e0ef", "comment": "Malware payload (Mirai)", "value": "9323c34b7e9fc5500f618bc51bdff92a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "72863db2-05b5-4fd5-b443-5c0c43a99ef3", "comment": "Malware payload (Mirai)", "value": "a3e7f437a5618714bdf6f501e8aca5b6582de3c3215e1aad890158edc553ff3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "4b9e5795-d0bc-4096-9a81-aca0c3750578", "value": "T13021A8A61BE66C57CDA40237DE9A97A0A325EF89D0CEB443F22213110C2F7191F671", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "60c5cdcd-4209-4411-ac87-65acf8c18394", "value": "24:a0bkDmuH4eq5OlFSw0/cvMnqFqU46BuAOFNfcG:askDbHjTFSwRzBuA8Nh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "f7e71616-76e2-4680-98ff-1270f8f91caa", "value": 1220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "8d8b0b59-3260-469b-8a42-a5e321472efc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "af1ce294-ba1e-467e-b039-ce939648ed5b", "value": "t1d5900273ff4f59c054d0131680c06200ca61c1231402bc5054c58c60954360154355", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fab140cb-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "446817d0-cdf4-43c1-ad19-478fb385755b", "comment": "Malware payload (Mirai)", "value": "7364ed70902c1d8966ea7a30671f0bfd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "b3ebf81e-c3c9-4e45-85fe-fce9f63f803a", "comment": "Malware payload (Mirai)", "value": "5c697d5c77721edc85f25704418a8377b26b90b51e5d34ba289e3cb7d91e0a83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "dc686705-51ee-4b6f-b26b-2cf2f232ba15", "value": "T16C51FFAA4F903E3FCA6BDC36056AD75623DC800F6299AF865374E9007F0664566C3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "3d2439d8-23f4-4a9b-a9c2-84478a5be2ea", "value": "48:XEfNlcmbHcscDip8491fimzpwj3A5GyRZ4l5r7JLXaAZ/0HVrCJxp:XM/ckcscEnBzpw85LZ4zr7dXay8HR+p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "5cc903d8-0f56-48e7-b575-dd16d4e982ad", "value": 2640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "65e9d3a5-a70e-45d4-8028-58e40fae2662", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fabfcb23-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "1fb63447-e8f4-4267-9700-da46e5284d63", "comment": "Malware payload", "value": "1fa5ce251e6cb534e140f2644bf4cebc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "0fe4f1ee-2e5c-4daa-9046-e04085b11185", "comment": "Malware payload", "value": "3661b3e11abcb84d00e9da00fcfd5c64e2b8f413149dfa8e637b4fabed276359", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "a7e7dc14-e403-4529-b318-439e7a987115", "value": "T1A4E086F904580B646CC0E68F2997C9237103675E64C54F366ADC75B646ACC05F855B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "a6deb888-09f4-4d4e-9ca5-bc610c09555b", "value": "6:lswzI9EpVLIqtIm8DtFzswzIdpVLI318Im8O:GLS7rcFYLd7Ke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "542deda0-de32-44b4-be43-0f7391fc66f3", "value": 323, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "aca3f8ab-37be-4536-a5f9-d1c3144365c9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faba8388-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "ef0586c6-36de-4715-8fc1-6549328080cb", "comment": "Malware payload", "value": "38d9b3fd7b373ff572af99652bb519cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "ceae548f-8574-4644-9ebf-2bf50bc80207", "comment": "Malware payload", "value": "3313c98be0a168664761362404dd1cfde37454d526a66d3b00e61dd35094c20b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "fe817b05-8c07-44e4-a67a-267e2ad9f2b7", "value": "T1E83102D950A206F43CE09A47B76FCC2FB1063A8D29C90F99AACCB4BA599CD40F0617", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "6bca5eba-69a0-44b4-af6c-134a6f1a372e", "value": "24:sF+TRZvc1remutEA7NLtTTYra6eBE5fltRN/XJkZF:eze9TPxBMHkF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "6beb111d-3235-4b63-bc48-5d02bc787725", "value": 1582, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "04fc1925-16fb-48e6-8488-756c4439063c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fac3f7ac-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "aa521987-4df8-4638-ba3f-ec31ca943ec6", "comment": "Malware payload (Mirai)", "value": "4a080824cf3f788cbbb33fcf1b062867", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "433b2f44-8f96-4153-883b-e0b97496550e", "comment": "Malware payload (Mirai)", "value": "d0317e318ce2d65affab8f0791ca94f77eb09dfe51931b966a99d50b56ea17b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "f3e15854-9671-41a4-b1a9-02191784d73a", "value": "T1F24302FFE4D6919392320F33E9679088A754675DE075B7FBC1588568CECD2880DBA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "c31cca5b-afb8-451d-92f3-b5dfc3ba851f", "value": "1536:i1AFCowBTZQlk6GiMTr++xgRF4Q7eWDUiZzx1q:tgoKNkke+MF4C3UKq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "cc025300-bba2-4d6d-8641-8c83b161530b", "value": 59204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "b663b505-c933-4562-8b1a-cdbff864c08e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "4bb14d1b-3043-44ea-94f7-756fdacb8d85", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fadedc43-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "0fd75b7d-50d4-4b20-8f90-5390eb63efe9", "comment": "Malware payload", "value": "1f5aeac334ab8c87e188a69531abcf1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "1adaeee2-f096-4718-b87b-704e4b1c6a30", "comment": "Malware payload", "value": "03eaadd2945b82941ff2ae9225386ef8e22adb3f89ec180d6419ab7434bff98c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "da4f6e21-5514-4086-af2e-af6bdbaf7131", "value": "T166F08CF605C50EB424C0D689A3A78EBD40085AC96CCB06C409CE95B8F304854F461E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "8b89ba71-73f9-4808-8ffb-dad3d3acdabc", "value": "12:8p7reg3Qri7Kj0btQ5p7reyQ5i7KqbtQO:87reFe7lbin7reDo7DbiO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "516e1c9d-0273-481a-9525-25ad470b80a8", "value": 620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "ac7513f8-1541-473a-ac57-da90e3cedd90", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fae5e065-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "244631e3-d9c2-4cce-94ac-e543674241e1", "comment": "Malware payload (Mirai)", "value": "d313d905671e255df7c410a725f1d369", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "dbaf9f7b-2e65-4ceb-b662-7ffbfbef919a", "comment": "Malware payload (Mirai)", "value": "94ff98ea70aa03d362737895b3bc1a5b668b446f8910094cabacc196edc21a3b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "a332c018-0280-431a-b0ae-08c7b0832306", "value": "T11053027340089C65977805B0FDB3C311E78A46FC5199A3621A5A2C25F28FE67BAF77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "13b74f22-03ff-428d-9cf4-75e194b0518a", "value": "1536:ETNjQLG8dsBFelpvPsZ++U5gZ1moG0QirFE+iFkoTE4NM0Xr4A:EVKhdsBFelp8++OEmoziFkoTlNv9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581168, "uuid": "533b3399-90cc-4f94-97b8-5692bb7b75b1", "value": 65668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "2929e563-c4eb-44d5-bdab-5443ecc8d674", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581168, "uuid": "83479437-6194-403b-9f30-02935a99ad02", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb29156c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "f58e1915-2dc9-4417-b9f7-03adceb7dd3c", "comment": "Malware payload (Mirai)", "value": "fd7388042ec2e48c6671b1c481c28ec6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "1f27e3da-ff99-4645-b913-9498957a37bc", "comment": "Malware payload (Mirai)", "value": "59fcbf6fb74febaf325893302593e78b5ca1994eecde0de77b6db4e37b4bc1f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "e510df21-6941-4e3d-ac91-bc51297ef6ef", "value": "T11C53019632134122CBB5187294E7D78B3BC31ED5E0FB70AB36D0EA3982448635DF96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "c46ce032-6c67-48b4-bb3c-37411a4b5dbb", "value": "1536:Ra9AHxjhMyWcswIlQnU7IbimRAqQhEtY+N/1RCRka:ss/kpb8imYWN/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581169, "uuid": "a2e4be01-9d27-41cb-8e36-9bc834f2af84", "value": 60864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "0ce4add6-a09e-4018-8b4f-e53e3cb7a18a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "15af7c8b-e5c6-47c1-8dbc-8f0a73369cfa", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb20e280-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "e924fd76-d3ac-4222-bda4-4bcf5bb9d94a", "comment": "Malware payload", "value": "8279ad19f93232a778fbf2fac6d0acce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "3665d28b-1fc4-460a-8848-db471363e51a", "comment": "Malware payload", "value": "23e5eb57c0617e9b801b48bad6a207a73ef3ec6061824b14c3b961a2ba5f8f8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "306c52a4-3e90-427a-a888-036986c0859c", "value": "T127318DCA61B11A792DE0EE4BB36FCD6E301A7A8D69C54F9969CC30F658DCD41B050B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "69c59e81-04b9-4c5d-8f76-1458ab1058d9", "value": "24:sF+Tk+vKs1UEsulzA7nHstTVmsr8IseV5Fxsths/n5lskIn:eLxA6m3c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581169, "uuid": "c6c4cb94-5d6b-4ece-9b13-9ac8a75db6fe", "value": 1516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "f51c342d-0430-4372-89d6-ca5226ae5ccd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb330e36-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "86a11f3a-fc1a-4869-a8b3-a6200f6a6244", "comment": "Malware payload", "value": "598bf3f97cbb5308fb5e6070526476d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "c0493fd9-e08e-4d9f-b842-9198b2525287", "comment": "Malware payload", "value": "0efc1b9825a65e16c006e7b88949e63466cf5cd99975ea79be4ebf7d8bf1853d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "91182829-5ccb-43a4-9733-875e85610100", "value": "T15931A0D991A106752CD0EE47BA6FCC6E300A7A8D28C94F9969CC78FA959CD44F050B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "d8c174e0-33c9-40cf-ba90-df6b2ec462c7", "value": "24:sF+TRZvEf1retEuQA7NZtTTIra+e85f/tRff/XbkZx:e/Fej5hAf3ex", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581169, "uuid": "f79a529f-fae8-4da4-bdbf-c1fbea7cff45", "value": 1505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "87564bfd-b9a6-4ca4-a1e6-f4ed813f2891", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb6c77ff-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "f51369f5-b7f9-4520-a966-83885cd8ab02", "comment": "Malware payload", "value": "fe0e1c7f12798ecd520879c98e78e99f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "ed9e1312-74ca-4e8c-b8cc-9425d9b3da56", "comment": "Malware payload", "value": "9cebebb2a93ee97e646c23e1b0657e2ca405bce22cb543fd85ba1926aa19d0ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "210633e1-4c46-4db9-91b8-9e003aed4925", "value": "T19C3101C950A007752CD0DE97B6ABCC2E700A7A8D29C94F9969CCB8FE55DCE44F051B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "0635934c-85fb-4fbe-a627-0cbb138b8b4e", "value": "24:sF+TRZvl1reruNA7N5cFtTThraveB5fKtRS/XekZw:eceXADEs9xw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581169, "uuid": "3463ef65-a256-43c1-8022-27391215892e", "value": 1549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581169, "uuid": "8a3630c1-b13e-49ad-b9ca-59b8d5e67792", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbb821fa-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "d3080821-793e-4aee-96e1-5aaf771a4676", "comment": "Malware payload", "value": "8cf5526de67dd10dd3473300f26587d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "a122f000-871c-4731-9837-4a1658ded276", "comment": "Malware payload", "value": "f04948271d6d547e23057e8d4dbb9d8b1d8e2f89431f860bb7dfc95c0180d3fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "f138f6aa-8607-429e-a0ab-5bed1f074ebb", "value": "T1C331D1DD90A106762CD1ED47BA6BCC2E300A7E8E28C94F9959CC38BEA19CE51F050B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "c61deecd-eedb-4a2b-81a0-31e4c3b0c9f8", "value": "24:sF+TRZvk1reiu49VA7NhtTTJCrameODV5fPtRL7/XjkZp:eNeE4RZabbjWp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581170, "uuid": "455ef7cb-59f2-455a-954c-45d128622d7c", "value": 1549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "800c90fb-bfa8-4301-a378-f7d9dae6d886", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbbe48dc-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "3a20dae6-d96b-4fda-bc92-19bf1f821c77", "comment": "Malware payload", "value": "dfc303177110905718708608df874f74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "9039ad25-d751-477d-b01a-64a9c7644f84", "comment": "Malware payload", "value": "a7407538df92ccff548f73c06218af427b1208320e11e1b973ac176b1f9ddee6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "1ef7d96d-4d01-4a45-ba82-e93ca94694bd", "value": "T16AF090CDB2A506B72C909F46F6638C6E304A7A8E54C98F98A9CD75BD55BCD40F0107", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "bcaa0989-938e-466e-b111-182ea494824a", "value": "6:lswzIGQxM+qVLIF2ukzswzIGi2qVLIFI6gaDzswzIG5qVLI/k7zswzIG2K+qVLIa:GLlxM+uN5YLt2uTaDYLOuakYLC+upn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581170, "uuid": "e8014ce0-ebbc-4afe-8af7-004032fc3484", "value": 559, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "9571f04a-3d56-43ff-9dbb-a93f3bdc1d19", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbc57661-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "bcf8b8cb-ae0e-4d4d-8f05-d8c0f93b0e76", "comment": "Malware payload", "value": "091ca1499f5219702f9626bdeb105f42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "a26a6c3c-37d0-49f1-8dde-71024a5bbe04", "comment": "Malware payload", "value": "77df123fe24fc19985d581f43a12cdeeac0b37c99afe21f4bf1beadda8da3376", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "89d6f03f-3f92-4707-8cf1-c012e7586be7", "value": "T1213104C950E507752CD0EE47B66BCC2E301A7A8D28C94FAA9DCC78FA519CE40F0547", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "c3f5a440-54fe-4069-83fe-f11c10d310b7", "value": "24:sF+TRZvv1relu6sA7NctTT7ra5eWs5fitRK/X2kZC:eUevWKE35C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581170, "uuid": "6194b0a0-35f4-4314-ae7e-197cfebc37e5", "value": 1538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "a4a9fa2f-3a2e-4287-811f-17a762736162", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbee9e44-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "13c206d8-4ba7-434c-9a19-77c9e0d6c5c9", "comment": "Malware payload", "value": "1768b7dfbc6fcc0a732eee9a1e284e8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "6d5ae7ad-2f6b-4ea0-a451-676a2d114269", "comment": "Malware payload", "value": "e3034aa94ab874dc6a2b5e55c0251c4942ecf16603133e034b72de4eb4389649", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "53bf5e35-5da0-4049-bd8d-64d642267283", "value": "T1A0E0ECC8B82233730F8EAD0BE763C86E2456B14D8456A2A6AE99946D9270E45F5342", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "dc23d7e4-e10d-4d7a-8b96-93cd89d7a640", "value": "6:aSFXNIwMe1jakFXNIwMyzFbE0E3cRFXNIwMMa0LKif:jtP51LtPW0OktPTa0LKs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581170, "uuid": "5191ab6d-c6f4-47a0-a873-9e43329dafed", "value": 311, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581170, "uuid": "ead20770-ac2a-414b-8bf3-e366f8871043", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc78eb14-3551-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "37cfdd1b-aa51-4d41-95d8-afee004f54b1", "comment": "Malware payload", "value": "ea81983f1389cee0627c4003e15d2a4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "2552bc55-5944-411b-a7c7-e1d867ab1ecb", "comment": "Malware payload", "value": "f6b343faf65489ba192f54d37843b23136d319f36de1b926dd5885d8eb75ed76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581171, "uuid": "9b1ee4ee-88e1-4c49-b992-c1ddbc868d5c", "value": "T16631C0CE54A116792CE09A47B67BCC2E700A7A8D29CA4F999DCC39BE55ECE40F0607", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581171, "uuid": "5b19100a-c262-429e-948f-ed0dbc522458", "value": "24:sF+TRZvQ1remukA7NHBtTT8ra6e45fftR3/Xu2kZl:e9eDxtQvu5l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581171, "uuid": "c20cf33b-65a5-44f4-879c-2bf902f5c7a2", "value": 1571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581171, "uuid": "45afead1-aaf0-4787-80b1-c23daf65f3ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b42e8b1-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581276, "uuid": "54ce0ce6-6448-42c3-bc4f-90c77a918484", "comment": "Malware payload", "value": "43aa3dcd99e39745061efca22f095704", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581276, "uuid": "3988bda8-c2b6-445c-a4bb-8da4e7e6fbfa", "comment": "Malware payload", "value": "1c85afc36bdd5d374be48b0c2344568c2beb6c5efa8d75508e20c3b2d9dffda8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581276, "uuid": "a9eb416d-f200-4c24-9704-0e7058de37a7", "value": "T1AC159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581276, "uuid": "e4a784dd-1737-40e3-9c02-486d5507f302", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581276, "uuid": "00a30a7f-08fa-496c-a0ef-a6df51224f12", "value": "12288:5qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaMTt:5qDEvCTbMWu7rQYlBQcBiT6rprG8act", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581276, "uuid": "fe6d75f4-60ef-412c-b539-8921e5d0613e", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581276, "uuid": "97986068-2775-40cf-8be7-a153ed2377ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e69f464-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719581335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581335, "uuid": "44626ea1-699f-495b-a286-a27f81677c5a", "comment": "Malware payload (Amadey)", "value": "431fe75bcc7ffdf595475d5faa30a566", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581335, "uuid": "993a99e7-9d8f-4412-8935-e97f068077df", "comment": "Malware payload (Amadey)", "value": "342d751a8aa2c988cc84b867c491252e40223af5c19f05b482dda420089a8364", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581335, "uuid": "e04f93d2-ee8b-4ef9-b554-0b05f29a0629", "value": "T14E9533D7DA8A85B0DC03F27781BA47457BA4B2819A72FC20C27783F009197F67661D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581335, "uuid": "e722adff-2ebe-49d4-9c34-a7fc44348fbe", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581335, "uuid": "7ebbf92c-6478-4d89-b97c-f7e9a8f88fc0", "value": "49152:f2eFVdnII07uVI7G75UKi4qdNtMEL3Z9lBe1c:ueZnII07eI7XZ7l3hBem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581335, "uuid": "90390593-27b9-4759-86d4-1e554af51a96", "value": 1900032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581335, "uuid": "f8bb08b1-5b94-4abf-8e2c-1a03188d2a4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6520781a-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "c26e04df-18d5-4d18-9f6f-d620160ec49e", "comment": "Malware payload (Mirai)", "value": "5f028847853f0563cfab8ac1bdc552cb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "f74b40a7-4850-4abe-aa35-e9b85d60f7aa", "comment": "Malware payload (Mirai)", "value": "9983d736b494cd8a47d14a9efae717263b6c071cf969a145abefb2b2f68fcf35", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "7c65993c-da6c-4534-a32e-557230858588", "value": "T18E439E77C829AD84C44546B4BC354EF41F53F0048267AEBB1A99C6768087EBCFA463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "19311a9e-aadf-42a7-bcdb-02bd9ab84c2f", "value": "768:4DlsmwmCrey4RCmDzkLghTbMCOCCufLKrF1JakomvPmm5CEqGZyf6nxFz9I:4DmHrF4zzkqbRRtKrF1kTmGCCEFxD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "4b235d35-c9d0-4cbe-978c-bda9f6fc0804", "value": 60232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "97ecec71-7c84-4e3b-af88-66df587f4a9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65278653-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "201b0126-3974-421a-9f9a-18890088983c", "comment": "Malware payload (Mirai)", "value": "325cbd55e2f73742df5ae6eb7920ab1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "8088fea7-361c-43b4-8587-cc0f61dcfb01", "comment": "Malware payload (Mirai)", "value": "8e8252ac47c401169468fb785da7f69f2301bd1167216d9ea8b220a87c42e75d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "d24928f0-9205-407c-8d35-fd6ec9d62bd6", "value": "T1AD735C22BA761D1BC4C0697A61F34764F2F5578A25ACCA0E3D720E8EFF3065032936", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "4bde85eb-97ec-4899-8caa-a5329a862168", "value": "768:Hj9Ye8c80sxOOATCJVVZI4kn8MjqJZF+O+lM5V5TNHe2E1tGtIK:H5Ye8c80sxOO55ZPk8MjQZmlM50tGx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "eccb02dd-3a55-4654-9996-2365ea902467", "value": 75280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "86351ba2-cdc7-43eb-bdb7-d279590a1fdc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "652b76a5-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "09ecfea2-bee1-41ff-8029-c03546f8cf91", "comment": "Malware payload (Mirai)", "value": "443c72bf9d8e915e2d9f088e1fa464b7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "6ecd0319-0ec3-4d26-9128-149495b26bdf", "comment": "Malware payload (Mirai)", "value": "f7c3cc7be4f1fb81bc7d76409305bc71df7b3ff01a78133ca07ffee907182c02", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "e35607e4-d4f0-490c-b180-7b863ef5c3d0", "value": "T1CEF2E1DCDDD898C3D75CDAFF00AEC391068110E9339E6B58631408D98EA9D9E6A1B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a87917bb-8bb3-47b7-a08f-4e9b1014983f", "value": "768:PcFxT23Z+4AqNG/2kIfnilRuq7VuE3uS0GfNELm9QWO:PqxTO+4tGebnA/H0Ix9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "d05196b3-dcfa-41f1-b1bb-84bb6ec35318", "value": 35032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "b83747ee-cb4d-446f-a12b-05f57eb8d3f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "652ba177-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "8d4be82a-d89b-4bf9-a313-a5d803d51f0d", "comment": "Malware payload (Mirai)", "value": "b1c72721fd616e6a6c7affd5e8fc5fdd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "908374e4-2b2b-4cf3-954f-8cc18023318a", "comment": "Malware payload (Mirai)", "value": "9285baba9ed8609fc24dcd4c744089cb7a050b25004ece8efeb865cb7e3b41fc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "fd4a3581-3fa8-42e9-b13d-954ca7ccce03", "value": "T193733BD6B801DE7CF80EE77B48234906B671B3954A830F366357FD63AD721A90D62E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "c54dc12e-4347-4d1f-8b94-efce4370ac7c", "value": "1536:VJtOVFfFz3oj4R2b8m80Zy69xIAOKQT9VxEwTEnXUicl0uU5:HtKf2jTb8sy69x3g3xDTmkvU5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "0ae8ef51-5ea2-4897-9f28-856363613971", "value": 73432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "7a2ecf8d-3d12-4993-90a3-fe5b553affcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6530eae4-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "630e542d-323b-43ec-8710-ed8c79595ac3", "comment": "Malware payload (Mirai)", "value": "342b4cb1e1a52cfe203a091204e8fee0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "52e5d367-8bc2-496d-bd6f-d99d61b8ab9b", "comment": "Malware payload (Mirai)", "value": "0d0defbfee4473d9ab5878e8974fbdecd34e7a7c2559cfe726ecea882a0790f8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "d1ab38b6-888e-4186-8312-4040a8cac7b5", "value": "T116430161D70F0C23427A1EF4E97B9C499EA6B5FE26B9867342385E3D12FB1031C596", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a1bfe137-b8ab-479a-8074-2806c8da5c89", "value": "1536:9411ZTIKYHt+FnjrL790vgCJ6yDjlRY2+2huk:KmKYHeXL79141K2hT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "aafb1257-b0c4-46d5-95e3-66075a3c04fd", "value": 57808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "3785066a-2874-4e4d-997e-9b5edf1335d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "48131786-2946-4a9b-bda8-772f61a4e700", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "653af87d-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "dc2c5571-7f4c-4fe5-bbcd-c9d4270f54de", "comment": "Malware payload (Mirai)", "value": "424f976eae67d055e5b25562081b0126", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "4a57fef9-f9ce-40d3-8c30-b7e5a5f0e213", "comment": "Malware payload (Mirai)", "value": "5eab25002b83d46672cba2e1c6bd22fe3688779c607b0b22f73993080b384168", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "56aa874b-c3e9-4486-b063-26d101ccbcf7", "value": "T1E2430252A51F0E75C03D4A74F8B3DC0ADF1B46F7617907F2837A8A6C18E98172DA1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a2692d26-e297-44dd-b380-e6a4a592fe39", "value": "768:zpxitkUPuvs+eTXYLLSTUPDlCb41Vq+qK6zFJpnjG9q3UELYAdHBdfGoEdYI7SYY:9411ZTIKYHt+FnjrLYAdHBhEO13T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "c9d7f6ed-a5a1-4536-947b-115a5ad4558a", "value": 57748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "4526359f-549f-4f61-8cd9-64f89b15e28e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "0944a300-0ed4-4f34-8adc-1339d193e517", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "653ce418-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "e3830d5f-fadd-4c76-88e5-10c71d687dac", "comment": "Malware payload", "value": "00bd128542250cfab33dddcac185280b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "b8fba75d-eb0b-4b6e-99dc-3e35b6061321", "comment": "Malware payload", "value": "7c862d7cb974236ccf296e5d32013ac7b9eddd24ae83403be1b4e637f325c7b6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "115976df-63f1-46f3-b2a9-35606a6b1224", "value": "T1E51133C78728A426C104CEC7B287C458A52567C921CBDFECADCE0D7988F9904B6F8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a68402e3-b353-4c66-b50a-eebbd73e6964", "value": "24:c+rjfD+Kmf7KpDRUseKUSrjzhgC73Zxkeu8mo8e2a:cQDyW75jxKopq8X8Ra", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "f5321b46-02cd-4452-86cb-43f4c61faba9", "value": 952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "e7c931ce-94f0-45d8-b072-e09f3c21e9fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6541a1d9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "04a036a0-37c9-4d16-bcae-20579171bb4f", "comment": "Malware payload", "value": "66fd9c32a9a9bb164c11b49c557884f7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "8931431e-53b8-4fb3-a268-291abdd3ad01", "comment": "Malware payload", "value": "fc5011943a701a794f308bfe6199a150ce6519f3dab009e7b773ad8bbf86fb1e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "21d475d7-9bd9-4542-b59b-282aae4e321c", "value": "T1FEE2E174BE0A09F4D196D0B6BBA23B603A310FBBF4D05C8255ADE66B5CC76D021579", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "76ed25a6-65a0-423a-9003-6395b3ac2862", "value": "768:PePpTuUBqmr8ofhufjq5eBa0mX6VPJcZCMJgGlzDpbuR1Jx:kp5BAxfuQDm0hcIEVJuj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "5e161bca-aa44-4dd6-b6d0-12d368152ac0", "value": 34212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "ecd53e6c-aca7-413a-8bae-77ff72fe00e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6543ed83-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "468e1efe-6e37-4587-a108-4bc439b1ab0c", "comment": "Malware payload (Mirai)", "value": "cfb921f279ce364e17aab0138e45016d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "959d11cd-d10a-4a9e-898f-ae348f60514a", "comment": "Malware payload (Mirai)", "value": "fce2be29d7c90c1c5a2585b8714a172f785b3f8318c86d410a639791421eb66c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "8ca4ef14-9657-4847-b3f2-999336865caf", "value": "T121E2029817C9F878CE6F0138D2FF61179E350E04D76E44122AC4B5A9B3BF9A69225C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "dfe8596c-4414-4f2f-bab6-a5a136ba9627", "value": "768:E74+ml9Rc/EcBSFf1ex2RJSlDJpZMqpAExMwxloR:qSq8CSSx2RJSlDZMrCW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "cdada285-e29e-4a61-984e-c5f4a252d8ff", "value": 31524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "da28403b-4791-416e-b7d3-1bc9ef2654d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "21039109-a640-4a22-b2f8-fb8abcae45eb", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6549ddc9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "64143aa6-7c05-435c-a1b7-7689f4b5e71d", "comment": "Malware payload (Mirai)", "value": "5d836679208b117e6fa65c99291e76f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "b5b558cf-ae6c-4cee-8668-831673f9501a", "comment": "Malware payload (Mirai)", "value": "5b2f8e94ad3ab35d9a7f437f606fca6e95b5ee56cf73099ec94645d6a564d063", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "876b5677-ac5e-471e-95fc-9227e228603a", "value": "T18EB2C0716ADAE871C3680C79BC788389379B5BA6D2F7709102111B189287C4362F9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "5d6338ed-f99d-47a5-a8f5-f4e9c6c4d266", "value": "384:yBO/rinPfI/g+r3qdt46KnVdrybYytI2z70H4hAa7FRvnxH8tGvqqTpGkzLJd1RW:yO2k2t3wTyBQYhFNxudkzLJd1Rs3UozP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "020e2b5a-275b-42fd-9920-4cddcd29d2da", "value": 25408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "0a60270e-275f-4d26-8c43-81f20cf7edaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a27f405e-5a15-48f3-9b6c-c25a8ed6c2ec", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "654aefc6-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "3fca3996-3ff2-43ff-b17f-5d380772b513", "comment": "Malware payload (Mirai)", "value": "1288a54f91c92fa1530fd1bc0f3a8365", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "b906b8a2-331b-40f5-8662-1d92163f0426", "comment": "Malware payload (Mirai)", "value": "c61cb5427e5af75780bcd2cbe79022f1058147ffb25f332c145f827ec82e353e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "ff77af02-af72-4cd7-8078-43eeefe92165", "value": "T13CE201ECC5BA27A4D81758B07B73AEAF0CD710A127DE956F2A6070C74A93887C4E0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "0f6dd6e6-c139-444e-9a68-5759b6dbcd78", "value": "768:Hl7ck0XzQPtFowutfQpqC7MzPWKWDW0JQsxZlLxc64WCttsIy:D0UP/rycMDbDJ4/Fc64WmCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "52a15cf1-373b-4b8c-9990-d2f95a85967c", "value": 34068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "e1a5c26a-fe18-4bce-8df4-4358037a9b96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "bcc6aea5-a8ea-486c-9fdd-059865813526", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6555bbc9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719581347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "b9855639-4489-4d9f-8a65-faf1460a2654", "comment": "Malware payload", "value": "a95ac75f6625cf99ad4d0483bb716bb5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "30406170-413b-4686-9978-09e4ee102f1e", "comment": "Malware payload", "value": "bc4cd670f04ac8c31bc6d0e8333b8528df9a6d64ec5ed3bbe7bddf029973d051", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "6111a756-efc0-4c5d-8806-f3b1ee5f1fb3", "value": "T18CE2E0017C934C61F6B60AB6DC74C9C22317A6B5A39E72253934CB9732C6147A4BE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "a8d74590-0fa0-41d3-abba-efe82c9505d3", "value": "768:w63L+kOPIeGIZ0hP3SvCZrsgV0O27F2iWTGiT9s3Uozo:DgQeGZSQrsgV0O27EiWTGiEzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581347, "uuid": "cc4db149-5535-41fa-a73d-baafeeb9e04c", "value": 32048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "14bfa10c-8940-4be3-9373-8559998a2654", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581347, "uuid": "f945a58e-7a75-449e-903f-d32496560b28", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f910276f-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PoseidonStealer)", "timestamp": 1719581595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "a32fa84f-2276-4396-bd17-195d228a62c3", "comment": "Malware payload (PoseidonStealer)", "value": "02a0407bea1bea006c35c0aa178a573b", "object_relation": "md5", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "5a021583-2e97-40b5-ab6b-8faf60ed8a46", "comment": "Malware payload (PoseidonStealer)", "value": "c1693ee747e31541919f84dfa89e36ca5b74074044b181656d95d7f40af34a05", "object_relation": "sha256", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581595, "uuid": "5a41aeff-252f-43ff-a559-04bae48d0e3e", "value": "T1DFF423355D0E7E30DDD246B1C035E8879CD93DCF9E79662AE927A84CA1D831062E4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581595, "uuid": "713d054a-8518-42bf-8ea4-bcb868e0b600", "value": "12288:ctlfnf3ncKqbjookPyQPyrDkQwv/d9rqdhHlNjC+zqLxL8slo/hORkj:MmRw7XPg4prqdRpuLx4slo5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719581595, "uuid": "925361af-9103-43e8-aac0-c31d0823906a", "value": 749924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581595, "uuid": "4a0aae8c-8846-4c77-8c8d-93b84ce0a64a", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e379c745-3555-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719582847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582847, "uuid": "efa005b1-a139-47e3-95b4-1860509d118c", "comment": "Malware payload", "value": "8b92905c9fcf5e690a9013675b9444d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582847, "uuid": "0df12cfd-6ea3-4003-abfb-526cb34ad1e1", "comment": "Malware payload", "value": "e19f3a1bfdef9fd9aac8158ae05d35fbbcca7bc2574f3fc0c789d8d04b274f55", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582847, "uuid": "8938d23a-7465-45cb-8931-75dffee7dfe4", "value": "T101112792E345FCFBC02812344362CC8833B449B40F85D76B4CCA14767E55798AD916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582847, "uuid": "9016c509-c01e-4de8-8996-7ad90c7d3a4a", "value": "12:eRxSGSGI6gnRsRNIpWAABAky6h1klH7ai8ySzsE:eR4GSXLRs0kACyba2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719582847, "uuid": "0ebe3880-5f02-440b-94fd-a7fab6aea833", "value": 1024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582847, "uuid": "99816d73-2389-46d3-a883-0afb4b182745", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50b6600e-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583030, "uuid": "674b77ee-d168-4de4-a080-410a5a3d5ea0", "comment": "Malware payload", "value": "27a99a87332d0c139b27098c1bd85ad2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583030, "uuid": "f49e86c2-2b88-43fb-8e33-0975ed12c5c6", "comment": "Malware payload", "value": "e98767997b662fcb51092b1612843c89d3b4f6f83a48493e81c695b776d7e6c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "44b30951-6099-401b-99a2-5148c4af2fca", "value": "T171473A8BB4924942C5E82637F8BE40C933B64EB99BDB655A5D01FD3C3BBE5D90A343", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "fe3bdaa1-d860-4817-839a-2272fd340cee", "value": "98304:qacnTDiLGtCxQMybpW8Bgr3zWk3t0QDPst33ZmckXtQbJSlZNcLypFAAf:qagJMybpJFKDU33ZdNJqZGL0FA6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583030, "uuid": "ef0bfc59-e6d4-42e1-a5d1-39e5a5fb7b21", "value": 26345624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "cd154ab0-447a-40d2-86de-573f506376c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583030, "uuid": "ab522421-3a07-42d1-81e5-474f81baef21", "value": "t186a0025291484a5361dd5069d760dd143650115548c45ce6a9286d89f8e4a65b1990", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bccd6eb9-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "858c3249-9108-4ec9-b102-5ecea1b4e79d", "comment": "Malware payload", "value": "ed9db4a4b4c991f63dc6ac04b3f1f6bc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "14ff9d37-c158-4c62-b798-591b8012219c", "comment": "Malware payload", "value": "c1248351b7474443e53a14be4901136077738798d34a93040cffdc6daef31586", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "b0e51e6b-6e53-47fa-a686-a3ab4ddf9c11", "value": "T1BB71555A7751FAFFE46DD33449F783286344B99125818B8DE208E5091F4274C0D6DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "d3c0ce07-29ae-4aad-b215-ffdcc4402b04", "value": "48:uAq3rDtouoWyMKkNBv8sVwM5leoEJjWNUUUN53+vKtTGlbfU/VIBiE:nqFhNyMKkBvrVwalREnEmGlbfU/VIBiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583212, "uuid": "04d7ec77-ec0d-451b-bb51-4f023919ca4a", "value": 3764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "58ba07ef-b23d-42aa-b478-85e9511196a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "71f9c761-6cb0-47c0-8e33-e649c4012f23", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcf27728-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "16e28716-10bd-4ad6-b695-100c09ef8081", "comment": "Malware payload", "value": "e47638724371c3ceba760fafe7531663", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "fbf41ed2-da3d-48e3-880c-f5872d0bd651", "comment": "Malware payload", "value": "1f1b6203837459750fe3c51678971cc1ef4b80eff8d888be434fb2ae686d65fd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "cfd7dda7-7086-459e-9e13-a3ec61dc1fa9", "value": "T139E10E5E6B20BBEDF1A8C77846F39B71839864A2A2C1878DD23CE1056ED470C0DECB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "eb84ab1f-3ff5-4390-84ac-7538bcea50c5", "value": "96:E7gdpWksxrhNs3NkfZS9KDezxw9uZLAfwEQ4+EOdStNKSlYFTRfTyrH1YSn0EYIK:sgRsxrhNs3mUZLA7fntDhoTo2Sn0ElE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583212, "uuid": "a6596c78-ab0f-4e07-b7aa-75d0efbcd0e9", "value": 6996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "b3b675cc-1e51-4af9-a033-fdff8f9b32ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "f0cd329a-b5e2-40ed-a8c1-cbdf889f4552", "value": "t1b9c08c02f2146d0616f34132a05187ea5203d11b866082d24ecd82c0947611905387", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd046df2-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "77f796c9-77e7-4e18-9c05-b65e6a59396c", "comment": "Malware payload", "value": "2a79adddcf32e6a6a494bbb624ab19a4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "68e933ec-c0ea-4bc1-9a74-ab78c474bdf0", "comment": "Malware payload", "value": "7d71b6574161cef5ade0018ca9a86e5b2304a1b0c249dee460fdd10fdb8bea09", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "f6b283e0-bfef-4994-9303-05a583a91045", "value": "T1EA03E9523A61FFFBE56AD2300BF3862112E576951EA1534EF25CEB4C0F226C81C5A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "5240aae7-0404-4bcf-a33d-10682793a96f", "value": "384:f65OpHEW0ar3sxZ0PPTi9dvybksBcMelhfELmorePasBmvnzvWSIKKQEoczViuc1:f65Rmmr91ybb7enwtrIF6nUoco3XV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583212, "uuid": "43c3f23d-c55a-4b7c-832c-1ca8176802e3", "value": 41070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "54f5d57a-ccae-4756-9fbf-01bece37b874", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583212, "uuid": "fa61fde0-f187-4add-860b-6eb153a84432", "value": "t19ad0a757817746a53f615c755c354aabad13931213a077b06e4bc189dc2b501b163f", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdd4a408-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583214, "uuid": "7a3f8d16-9e39-4ee5-bbd1-5b9808521817", "comment": "Malware payload", "value": "4fcafba6ada32c3c77e53bb933130207", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583214, "uuid": "96699362-a664-4a3d-aca6-19e279517396", "comment": "Malware payload", "value": "3b632395d6ee8f30202ae638a2362c4b3101ba53154b1108e10a354ac0154ecb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583214, "uuid": "6ca8fc27-5b7f-4676-9bad-e5e2efd58d86", "value": "T1CD34771A7A22DF7FF169877047F38A60579836D626E1D584F29CD70C1E2028E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583214, "uuid": "41837590-7961-49eb-8a8c-84655b77fc44", "value": "3072:4Y0jhbVsFzKk5RU/9suR+xH5xtIMuLcjMFI1ojz6F6hnxtH:4Y09bVyKoRuo1Zugjr1Ez9hnxtH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583214, "uuid": "bf2a859f-c108-417e-a6d7-905c6de4ab94", "value": 249384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583214, "uuid": "718646b6-44e9-4cf3-93d0-5968e5f7818e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583214, "uuid": "d46008e4-0b54-4cd4-9ab1-d126b36aa40d", "value": "t1d0518e18097807e0a7296d9d459dff36d6a320db3e166d338e10e86eeb69f439d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb7a010-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583267, "uuid": "5668c2d3-30e5-4cd3-a85e-aecdda596b41", "comment": "Malware payload", "value": "bb2f61d9490c7e36e182e51d32168110", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583267, "uuid": "90d3b0fc-6f4c-4bff-aa83-eb0ea6598af9", "comment": "Malware payload", "value": "e05d1ae738b998de08333ed477943d6f61d02017299939e851e51ebc980dc6cc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583267, "uuid": "fbd9412d-510c-4f70-94c5-9a3b6ae13c72", "value": "T1EE058D47F2F374FDC057C030839BD662A932F46556312EBB2584CA342EA7E641B2EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583267, "uuid": "e80d02ff-bddb-40b0-a7ae-c4f635e19c55", "value": "12288:eVx7AyJ8NI5JsAr3q0M8uSXHfq1my77oC5k4BLF5hzoHY:eVPJ8NI5eADrMpqfqhrBJ5hU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583267, "uuid": "99a710aa-5762-491e-a786-1b95bbd1cc45", "value": 852376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583267, "uuid": "0e44e02c-bf56-4bcc-bb5a-30cfc75264b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583267, "uuid": "9d010dd7-6d16-49dd-b09c-97f60160c24b", "value": "t1c5b01201c43c240c40d3d52eb4090787a98300200b357fa04fe6c18c0f20c5c3333e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8cb4244-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719583312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583312, "uuid": "5b2ae004-a56d-43ed-a324-c0992412acad", "comment": "Malware payload (GCleaner)", "value": "d0e2d6629dff374745645d3dc643d702", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583312, "uuid": "bac3686d-2bee-4199-bdfc-a4460cb444ed", "comment": "Malware payload (GCleaner)", "value": "0f4a332c9d28b53560614466588209353772c0b056165844b95111b4704c481b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583312, "uuid": "cec05b73-271d-4260-a540-cc45167d3e68", "value": "T12F74395376F27816E3B69B345F3D92DC2B3F78626E70828A11082E6E49356F1C9177", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583312, "uuid": "f75d960b-b13a-4003-a6ba-a20ed7e3bd09", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583312, "uuid": "9fb98560-a4b1-4e16-a1b0-a5c40fb5cd53", "value": "3072:/5ICLS6Xu51dqrFrSYEpxQRlLxm1S3f0rp5TXuf7zq/YSqdWUPFNw50fGx30S2MF:pLS6lfLLcSPsTeTZSjIFBf2kIX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583312, "uuid": "fdb474bb-7f01-4c29-9ed2-759dba9d6d3a", "value": 340480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583312, "uuid": "4054b55c-b400-436b-b933-790d25069547", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a7dbd9d-3557-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583369, "uuid": "96f802e1-a6e1-44af-9cab-ad4b11f06afe", "comment": "Malware payload", "value": "616822f4f0c5d48f8f2c329b4ce56132", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583369, "uuid": "ada92d94-83ec-4f86-87d1-f946184d24e4", "comment": "Malware payload", "value": "865193b053c15163f5cd41f108a60ce240fe217d792f6e6b8077c3222aeb4cf1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583369, "uuid": "6fedf5e2-0483-4f1e-a882-8f42888c450b", "value": "T19BB53383C1E251ADC96E77B0C87589EC10229573CAC77F9846E0AAB81C277D6D49CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583369, "uuid": "cea856c4-8220-4034-aa3a-66e0726b1c9f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583369, "uuid": "deef1b6e-7e10-455b-acab-2c2ab2b54639", "value": "49152:gHwt1LmBV9EwJATusYf03CWjlaoEcU/DZkF/GPxj7:a/HATuPfmtlaoEc+uMF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583369, "uuid": "c56aa364-cd10-4175-8656-dd4237cc8718", "value": 2407936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583369, "uuid": "b7fc9769-ba7c-4df7-94ed-04c6a7bd9cb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25fb7291-3557-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583388, "uuid": "fcb73428-c2bd-46ad-96b9-67ad40ff5354", "comment": "Malware payload", "value": "59a1c419b0bd14cf2c55941029ff8905", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583388, "uuid": "8740d8ed-ae9e-4a54-a3ba-e59fecc48cfc", "comment": "Malware payload", "value": "8f77482d4c482b29f7d358f2feaaa38df10a4cea6ecef7b84dd2e168e38fedb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583388, "uuid": "547cc630-f0bb-4872-9d4d-a56aa2128afb", "value": "T1B7D533E20F8EF55D4920A7B56BC3B5D4B4D6FE142231C570103608A9BA7E40CEE5B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583388, "uuid": "1ae1ba0d-de98-4ed5-89f0-0002a142c1ec", "value": "49152:UCRA4oyCOoY3Ny9TXiIPpJYO7WeTPltEBZ/3FSqdQe083haX3OtxH:VRAvyCOo8+pA2Pc9VSy98XePH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583388, "uuid": "9d6f29dc-ccbb-447b-bfee-34a398c2c561", "value": 2799092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583388, "uuid": "411abafb-6bcc-4ad3-8e23-0dec0a14dad1", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583388, "uuid": "f992484d-8bf3-4762-ba08-12d86729d009", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "497519fa-3557-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "1e1d7921-aa7a-4399-92d3-dcc20837bd4b", "comment": "Malware payload", "value": "3c44b01490087468cbf580257b016beb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "86c41d66-f403-4007-b01d-3720e3673862", "comment": "Malware payload", "value": "4a1832f2883ea4762ccee0e95fb1f904470a763b0ed2e9e6d75a8d95d83f7e71", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "d42a9244-702b-4b89-87da-c822c7508d98", "value": "T1ABA533C4FB84B406BDBCF4B481FB77B8A96554EC642DDDC44B38742221BD8261DFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "a1841c5a-02db-460f-b1f7-4286761d40e5", "value": "49152:zsLkVCn3321d8VJz0bcp3uSTL/22A8XUy9:vCYd8Xzs2eIS2A09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583448, "uuid": "c25b1d7a-05d7-4a85-af1b-952a3b990be1", "value": 2078492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "f482f27f-719b-4f1e-bb34-6af6a6f13fb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "86878e63-eea2-4b4d-a7cf-0761fbdc73eb", "value": "t1519002140704416b75351d646410c111f6b8138002c85514c1b9ec38fbc254405068", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49856dc2-3557-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719583448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "f87d44b9-ec21-450d-b93b-6c2c47e09fe4", "comment": "Malware payload", "value": "bb17305616beae7143ecf788b360a847", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "749f51db-8d4f-4189-aac5-23273e112fa7", "comment": "Malware payload", "value": "e6d82b89a5d706da32841008b118edf79740ade2df564ff41bb1d9e95aea695c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "8673f839-3b63-4ba9-9833-cad9ef32622a", "value": "T174C53327FF6E880FED8C4C1A105EBB16647E150ADECA47CD40B5457D5828BB298EC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "65bb5786-be26-424a-9c9f-9aae632d80f3", "value": "49152:6natZPU7e4QkqAD6MsJA28cKlZGK14XsdaWkNZiEHyMoHSnB4BsWzK1Z3QPJim:6natmXxdFrbrGKr5GZiEHyMoGB4sW2Dm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719583448, "uuid": "060f7f3c-fa3e-4e72-ab3d-11d7e83ab394", "value": 2706136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "d479f225-5d69-402c-abea-67c7a21d28ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583448, "uuid": "56e6acf5-9f4b-44b4-96ff-786df4b0384a", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a593029-3559-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719584228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584228, "uuid": "e9677699-7935-4169-ae65-d2d11b68a374", "comment": "Malware payload", "value": "1960068493093a330d343fe3bbc4b829", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584228, "uuid": "76d05c94-aee5-44bb-ae4c-fb90adb9a5b1", "comment": "Malware payload", "value": "1d683019f08aa23c50390f6160a69fc69724f12e68dec18f7caf64e9d58106b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719584228, "uuid": "88215bc5-f81b-49c0-9d2a-6fe7af901c94", "value": "T176B5335FFF164CBDB700BD226A9568140C25FA994A132C1123BEDB55DCDAE73C829B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719584228, "uuid": "23ebb0e3-b4d3-4f81-b1d7-6cc996e61a89", "value": "49152:JBDNbzKhwRGKrXrAHOHugcMLpdl1+AbILOCFiX0iKowrxeKQd:/DNbzKhuGCDugcydl1+xpizH3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719584228, "uuid": "481d28ac-e46d-4961-8274-a2d2a0676b0a", "value": 2346432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719584228, "uuid": "a7b9a3b5-5955-4904-808c-4f68b9c6222a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b7ba25-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "15dda905-e7a7-4119-9005-0e6e83b7843d", "comment": "Malware payload (Gafgyt)", "value": "e47f26263e46aacaf73f4f315982c9ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "2a60f7d4-a8d0-418f-9904-6a5f80f5692b", "comment": "Malware payload (Gafgyt)", "value": "37ad9a6d1eefabe1616aa64c6ffbdcccd6c528ff311120b4be7bffe01fbe72fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "9a07c6c3-6916-414a-a929-fbb501be56c3", "value": "T146E3F907EB614DB7C84FCE3202D68525148EA5A653D56FABB278CB5CFB0798B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "89bd77ed-5369-4492-bad8-61839c66a315", "value": "3072:lBXpqf9VHGn7vs85htpRvHpVFm0/5ApYADn:llp4Wvs85htvp7m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585017, "uuid": "bcaf76d1-0346-40e3-a64a-15413e977ee3", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "c933edea-9d9c-4aa3-a297-82174610d33b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "f4ac93fa-221d-4f42-87e8-bf51db39ad7f", "value": "t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0ca54ce-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "d0ddaa6f-c27b-4f28-9363-8de65b063b46", "comment": "Malware payload (Gafgyt)", "value": "2653f9fdff40cccca7e52da05e43f8fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "8b11f849-6f11-48ce-a78e-3b62b4e193b2", "comment": "Malware payload (Gafgyt)", "value": "9701fb96c79199fc66f260a283972c2f70a28691752532ed5458509a738d791e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "06d3b88d-9103-427c-a63b-d64f892b7f0d", "value": "T106B35C07DA21807AC09B43B21BDF96219D23B4FD1772310B33E5AEE46F095859F9D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "c7289fb1-e3b5-4cbc-a86b-f59ab441845b", "value": "3072:j6dye4BmJQ/phaZw/1vc4+AzkSXmdRWaLHgb4:d/phaZchrmdRWaDgb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585017, "uuid": "1cd4e190-c6c8-4e8a-bdc8-7e88ac4c9eff", "value": 108630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "a45d24fb-29e5-4f97-b3fa-6690afbb9cf3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "318d4682-40a6-4815-9a4f-21875a0c2c77", "value": "t1f111c213a0b9ca286bf758249dbc47f105511b237746be71bf09c5c49537002a979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0d6fd51-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "8e7a7fc9-8a7c-49e6-bfa6-7b661a619774", "comment": "Malware payload (Gafgyt)", "value": "b7465ffc6f91078c32ea1498d4d5ac2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "5cfac07d-ce39-4c90-b85e-ab87fe7cdc23", "comment": "Malware payload (Gafgyt)", "value": "89cd7a2095f4744e7c8bd3c1e2830ad361e2714537e775ee47c41c81edda202f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "2895f82d-67d8-4826-aba4-fb73fcf4735f", "value": "T18AB34C03A3190F43D5CB49B02DEB27F143AAE9E112B36182A61FAF9457B37791153F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "afe4c9a7-df92-4870-8511-cf2fac205532", "value": "3072:gQiBqcL95J6qEWLE3S55h7wLYm7ArEfT3n:gQiBClWLt5hkEm7ArEfT3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585017, "uuid": "077c5856-b256-442b-a416-865b264197dc", "value": 108983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "c857b487-97ba-406a-8028-3de6c138d209", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "4810b448-7df4-48d4-8832-7445b1fbd80c", "value": "t11811e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0e8cc71-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "e9b6bfc4-9e96-4563-a585-a1f2ee1629a5", "comment": "Malware payload (Gafgyt)", "value": "dadda24440a441a36cb30476103939d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "d7460bbc-f4f7-4c88-aec3-458cdf57a444", "comment": "Malware payload (Gafgyt)", "value": "25058556c97c58f5b0e47e7038ab16d42e11b7e06fbe6fe956a15359f5df9c69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "45530f52-531b-43bd-a14d-515cfe3ef443", "value": "T183E3D96B7961EBFAD05DC2310BF7AF6096A521E217D09345F2ACDB185E2034E1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "3b0b642d-52f7-4601-bc3d-e793db294148", "value": "3072:sGGNZfCos2pA4FC05hvikTam0/5ApYADn:hACyK4005hvi9m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585017, "uuid": "bd130737-c43c-41d2-9c81-b9a898cd59cb", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "9e0b5f68-6574-4d7d-b75e-825e653860ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "fadfbf19-4606-4da0-9d4f-2a23c42cb8e5", "value": "t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0fa3279-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "10fad930-cd26-406a-be31-c247008401c8", "comment": "Malware payload (Gafgyt)", "value": "f346e4cb9ed5106d402194173ecd4b7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "e06ed7d0-ac9b-47d4-af90-c5b72d5af298", "comment": "Malware payload (Gafgyt)", "value": "ea8c0b7cb73384ac5b1cc8bd08f1e2bcb6d9f18b2b583c3bd5c236a9fa4ab022", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "1cb88add-1ae6-49f6-9b05-1100057c5285", "value": "T150B32849F5048653C1D32B7ABB8B434A37226AE597DB33155638BFF03FC269A1D369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "44888fdb-b8ef-425d-805c-7f07fa785675", "value": "3072:vhfviOui5FCRSUaVejY68t35hqSr3hGm0Qxu1bXWIn:pvfUQVejYXt35hqSr3hGm0Qxu1rWIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585017, "uuid": "feb29516-2dc4-49d1-b513-61efa1ddc9c6", "value": 115077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "aeaf50a2-9dd9-43e1-af6d-6d22d1f71669", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "798e03bb-d71a-4e0a-a2f6-11a05aa33de3", "value": "t18811ce13a0baca286bf758249dbc47f105912b23b746be71bf0ac6c49537002a975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f102fac7-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "813c67f5-d423-41ad-b8ae-136c206a2e41", "comment": "Malware payload (Gafgyt)", "value": "89bc610690136b44e3eabbdc85df69be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585017, "uuid": "8463bfbd-3e6f-4199-963a-f7cd78c6f891", "comment": "Malware payload (Gafgyt)", "value": "c0432c8b6d7e3cdb4e4e8cbc1b699b29a548db93b4b7cc81351c8878ff4b4cd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "ff18ad60-3477-4fd1-b0af-145ed555f670", "value": "T103E34C09F6408B57C0D22776B6CF524633239BA9A3DB33069534AFF43FC27A94E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "e1cad7b0-be00-47f8-816f-943a5fa4ec57", "value": "3072:Tdbmn8aAEHqgSkano1DTAS5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTv5hWTGU2WV7ldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585017, "uuid": "4e8b68cb-d242-433f-a923-56e5ce51a1ec", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "99299ca8-c11f-4b17-bd7a-91c143992653", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585017, "uuid": "cf3a458b-8770-4371-a54c-57a0c868956a", "value": "t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1262c8b-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585018, "uuid": "d11c1df3-39c3-4cb2-99d6-8e53957f6dea", "comment": "Malware payload (Gafgyt)", "value": "8645ad5fbd0eff83db4e3bf13d679d12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585018, "uuid": "61e9db0b-80fe-46f7-a8e1-e19823dfa114", "comment": "Malware payload (Gafgyt)", "value": "653aca4d6c17510f3996e63e3a15a2ef2725b49052007637c125814f1efc2d44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585018, "uuid": "f4277c81-c1e4-473f-ab4a-5a396a349ee1", "value": "T10AE34C09F7408B57C0D22776B6DF524633239BA9A3DB33069524AFF43FC27A94E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585018, "uuid": "2b1cbf6e-a67c-49d3-8f3f-94add6afb6ad", "value": "3072:Tdbmn8aAEHqgSkano1DTAS5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTv5hWTGZWYxVldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585018, "uuid": "ff85ef8f-55b5-4c97-8608-1db08e7a191e", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585018, "uuid": "d85d7712-7e09-4fb8-8853-c4c6ce33b8c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585018, "uuid": "ed4a3f99-32d2-4133-9a1c-6f870b29ba3a", "value": "t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "115da5e1-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585072, "uuid": "dc474302-6555-441f-a0fd-07dea16f59c8", "comment": "Malware payload (Gafgyt)", "value": "b87c462652879741a5e265cb558f4d86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585072, "uuid": "309ea8e0-f67a-4465-bbc8-c25ff925f31e", "comment": "Malware payload (Gafgyt)", "value": "cffceff75d0e80331f0398f251ac3c8ea73c128d9ab0cda9a99fc6338f95211f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585072, "uuid": "01fac4a3-d928-4fb9-b506-87080ff6b541", "value": "T132C34A2777260A23C0E6543541E75333BBBAC7D529B05207B6A09EEC3F1A6D03963B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585072, "uuid": "b0202941-dca7-4003-9921-dd270ed5079b", "value": "3072:EOqwW3NEI4VvL/phaH9HcIqmPwAw85YIn:tq/qvL/phaH9HBqmPwAw8CIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585072, "uuid": "504c9eba-393c-4c88-b81f-b5bd797582c2", "value": 127170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585072, "uuid": "45c89754-8e17-4e0c-93a8-63d316d82cd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585072, "uuid": "62e8c2c7-6147-4a34-889a-b29323c09af9", "value": "t12f112113a0b9ca286bf758349dbc4bf105512b237742be71bf0ac5c49937042b979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "578bd479-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585189, "uuid": "47944b9f-11be-4e59-8259-6c1a7a65f5fc", "comment": "Malware payload (Gafgyt)", "value": "14e69de2b38d865ddf29686b86baac97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585189, "uuid": "a2001f13-def5-4cb1-97a5-e8ed5a1e2e06", "comment": "Malware payload (Gafgyt)", "value": "4bb110a3652a8ab13979313c4ddf492c09a78b76be5ae51e143d150ffee890fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585189, "uuid": "4a228fae-ea79-40ea-bc56-f1f37ba8c15c", "value": "T151C37C76DC2A5F68C695D1B0B0B08F792B63B59042875FBA19B7C2B54083C8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585189, "uuid": "bea2d598-fb59-4c62-b164-df3e7b424b6d", "value": "1536:Da60wP/HOD9ZuT4aDc+CD0K/nHflnMgEsNqmKW/FRDIhbeyzN:D/P/owFc+K7/VMgJjKWNRDaeQN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585189, "uuid": "c5344667-c82b-46b1-979e-330a4aff9da8", "value": 120832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585189, "uuid": "e2de9ddf-bfc5-43b9-a394-a2f8abc5d3bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5794c6b2-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585189, "uuid": "a8ff423f-1b6f-4d73-a8d4-bd18fcc97b6a", "comment": "Malware payload (Mirai)", "value": "83695ab2a2717d6a9ce71c91f3667e3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585189, "uuid": "47371732-5017-44f3-8288-1a9d80c456a1", "comment": "Malware payload (Mirai)", "value": "a7bc84681c06acc766df96841a36d96842cbe3baf7d783db149dd23464155bc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585189, "uuid": "6473a4a7-2e4d-4538-a4ed-aaff9fd9395a", "value": "T100E33AC7F800DEFEF80AE33648570905B630B7E205925A372257797BED3A1991937E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585189, "uuid": "6f6ffbd0-8a50-4966-bed2-b278dd088132", "value": "3072:Dcyz/gG6C/XHIiYzAAX9YXoVrjbiDLiTwtRyNx2Lu:Dcy7oigAWYXPLiT2yNwLu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585189, "uuid": "d2c38df0-f464-4101-b661-dfb91583d9b2", "value": 154592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585189, "uuid": "d14d9e1d-26a6-4306-8f9f-37c0786c8a52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57af3879-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "95ffc2e3-fcec-4a6a-adac-48a8d39584ce", "comment": "Malware payload (Mirai)", "value": "0b5a13819b32aa1bf0f3cf6590e29f5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "4d8a5b81-f83a-4892-9644-43998ba93ab0", "comment": "Malware payload (Mirai)", "value": "eb8c3c627fd0b2fec8f560b8ed0408456810fc9c481ff09fa0856484d1fafb82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "e7e26543-857f-4645-b527-ff5e7db7eab0", "value": "T1D004E816AB510FBBCCAFDD3702E90B1139CCA44722A93B363674D528F54B54B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "1c3fd0a9-be2c-4f90-85e5-556083fe3fca", "value": "3072:Mwoe3sp3Zt9nQiX/GpO1SMRpp6NWJdWQxi:MnSsdZDQiX/2ObRWoDWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585190, "uuid": "3131061c-2e90-428b-b350-a427bcb79e23", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "3be71e0d-b67b-4dbc-a0b1-7c235fa721ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57b298bc-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "85a94cdf-4915-4e03-8e43-711f894266a7", "comment": "Malware payload (Mirai)", "value": "ea42f3ea216167ed923646b716fd1c1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "4e31bc9c-751a-43a2-b74c-627b7f646c64", "comment": "Malware payload (Mirai)", "value": "010f4d93d67eeda8017921cea44625dfb69dfa423d5fa6c60ae61f6d752a9593", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "7c754c75-57fc-488c-b6e7-62aa0932e7c0", "value": "T170D33B06B30C0A07D1632EB43A3F67E093EFDAC121E4F645255F9A8A92B1E375585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "25871b6b-1491-4131-8810-bc1b4de63d3d", "value": "1536:O+65RMfLt4/IbINTgicUwK9xpNvTxNfjbo8PgUF7MJqvAfItK510LHqQe2khhyzU:Odct4TTYUB9xr7x17ga7MdfrhhQzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585190, "uuid": "30dcca52-71e5-410f-b37d-ba3421e35d12", "value": 136952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "c813b917-3339-4db5-9193-c3e019316fc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "582dfd15-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "459900bd-46f9-43c6-a255-c57b2ba143b8", "comment": "Malware payload (Mirai)", "value": "7097d7655a792c00c84226bce548446e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "5e8d9d9f-e84e-40f3-bcd9-6f542aaf3391", "comment": "Malware payload (Mirai)", "value": "3307b297092c683fcc3786fe4702455338f657891012612c697a14a9989eb152", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "b331fc39-2cbe-4c0b-afcc-aead02b28052", "value": "T141D30945F8414F23C6C612B7FB5E428D7B2A17E8D3EE720399216F61378695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "8aa5b736-979a-4999-b010-e0af76543bd6", "value": "1536:pIhcq8nZOrV3HlSdSP9I9oQF+Au4b4Vspf/TZVUDzbSElkzgGBwl2zUwywzFHRxg:pIhuWLExF+u4QXlVUDzo8GG9OHvQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585190, "uuid": "4d27cb00-c7ee-44f5-af85-bf9e1c82af3e", "value": 137984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "6c8c4ae2-e290-43dc-b70d-40a57b1aa17f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585190, "uuid": "e876842a-e52c-494f-a681-c762053d4c10", "value": "t19211effc4f8c0dd817c5cd85c28fa3153ab4767afa29281288663b0ec1029e1752a0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "586b69ad-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "057578d7-1981-409e-8804-e6627f61ecaf", "comment": "Malware payload (Mirai)", "value": "d0eaa09d2642c67dcf1a3ac9151fbfd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "e2bed886-3784-45ff-8ca8-08bcec168722", "comment": "Malware payload (Mirai)", "value": "a7b84c6fdd9846503b7d023c9703801cc72fbbed330f65a82f2d84230d3101aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "0567e404-77aa-4646-a5e0-94f70953c49b", "value": "T1E0D30945FC405F23C6D612BBFB5E428D3B2917E8D3EE720399256F21379685B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "2fe57721-0174-4fd5-a4b6-329023ce28c3", "value": "1536:CP8h2C+JG5RHKdC6YwYnfeL1qA1R94V7PqT8yZs3OfOJ6q+v/ZAl0+wywaFpOoTF:C0CGTw8w1qK4dq4yZs3Oq+X3sQC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585191, "uuid": "29725b1d-906b-4e1c-b986-7ed05ef2acdc", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "b7de28ab-23ad-4645-bfde-2d1c67fe21df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "3d1a7c44-6d01-4512-93ee-a6b879a74d23", "value": "t19a117fb94b585e9897e08c85c7cfb1293be57456bb02142788576a0ec6635c1b12f8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "586f841d-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "09f81445-0197-4261-aa28-a01c23ea7026", "comment": "Malware payload (Mirai)", "value": "9572f7619791d226d6f296ae8fe42064", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "7c19a8a5-b596-4926-8e6b-9223720b17e1", "comment": "Malware payload (Mirai)", "value": "8c39745b470875e9da4e7c5854bc69ed640a2166ada420c51abaec34d49be802", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "30463b1e-6f9c-4075-bc80-f4c11577c565", "value": "T101E31B56F8818B12D5C111BAFE1E128E37131B78E3DE72129D246F747B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "304c35a0-faaf-48fb-81c4-0908631e7c5e", "value": "3072:8RZLo12UL04ElrXueegwnaH3c9jbRCddN+Y6M:8R5o12wcrXJegmas3AdN+Yp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585191, "uuid": "1aef404b-6eca-4d8b-8198-02e4540915b8", "value": 148092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "8f931379-6aa7-4184-a954-35403763575d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "66161341-c0cc-42bc-94ac-696538102688", "value": "t1a40123a6cf4d188ce7c38310e1fcd2127073b4621a2129828faa1dcd45612e3b82c4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58c5ebdb-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "ca5df966-3a14-4107-b628-0213165e467b", "comment": "Malware payload (Gafgyt)", "value": "fb0305a961c2637b383c0d5e667446f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "41ad2247-84ad-4119-b587-6b7d94c95f9e", "comment": "Malware payload (Gafgyt)", "value": "ab74b8871f5f841422b3bb262740c2ac18b3bda9083a45f8e15439332f8a146b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "8cab94fc-47e6-4fb8-866a-6f4726874c5b", "value": "T1C2043A45EA414B13C0D72BB9F6DF42453323A7A497EB73069528AFB43F8279E4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "fc4895b4-aad9-49d3-8a7c-ef97cc7f1002", "value": "3072:OqSwFNQSClK1Tvk3ahn4qfdQGGgQzWo63i/YpEoGM/RxfQkRnSt:rSINilKBM3ahn4qFQ/Koqi/yJGM/Rxf+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585191, "uuid": "dbeacd6f-2a65-46ac-9d1d-a6adea5fdd4e", "value": 184862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "6fe22965-d787-4661-9bd5-b54c10b512da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585191, "uuid": "c176eb24-bf88-4a18-9aa8-03264c284389", "value": "t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "593e2a93-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585192, "uuid": "bcab3a15-188f-4195-b9f8-caae4c0d7e7b", "comment": "Malware payload (Mirai)", "value": "5a01883294c28d751694f09b15a22038", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585192, "uuid": "dc3e60d5-2c38-4dea-8693-fb14d68d89b0", "comment": "Malware payload (Mirai)", "value": "c6191a5280e4cfa3926417d570cc527078406920ea159fb18fb7ff827203b5b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585192, "uuid": "6beefa62-0a37-42e3-be4e-60fd0187f6b5", "value": "T12AE34A07B4C184FDC4DAC1B44B9FF53AED32B0AD1238B17B27D4AA222E59E215F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585192, "uuid": "7f7a1e3c-584a-454f-ac13-0e1bebfbb49a", "value": "3072:mTUTfCdO6FFto6I68wKhc/t/ekNaogMewcgsK027uTOls:mTUTfCdO6FFto63wwQdks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585192, "uuid": "34572094-5ec1-47ee-949d-41085a695aff", "value": 143832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585192, "uuid": "8fd216ae-8b61-4359-8b3b-24cb7b0a1534", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585192, "uuid": "114f929a-f369-44bd-b652-ef8fe9bb5808", "value": "t1785132b438253994b2fbba3ab30af991ac71095419e131d1dd73b8e2de167c40e728", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "596f5852-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585193, "uuid": "028d6f57-2914-46ce-a9a3-0d698b73a4df", "comment": "Malware payload (Mirai)", "value": "40611affaf61c1ae6be93b258cbb1231", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585193, "uuid": "e7792c8c-ed60-4bde-a42f-0536b5334d6f", "comment": "Malware payload (Mirai)", "value": "67173d1bdc2589d7f3682f9001a811f762a75d43cb6da8464554e348c4269983", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "3cc1d874-565b-4936-9166-c2377b8a46d8", "value": "T10404985E6E128F7DF668873447B78E25976833DA27E1D680D2ACC1101E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "0e73a807-19ac-4345-9244-377cba6574e9", "value": "3072:f6uSXvJnzjP0jSMzpyi579Yxy52tIen9A6qewZQjhaMh:f6uSXvJnvP0+MzYigAEnfqnZkhaa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585193, "uuid": "0106026b-6c18-4d87-85c8-add5de6b3f61", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "bdb4bb2b-ec35-437a-8fb7-5edf1d3577cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "79c78ee5-139e-459b-a8b6-f081a9a21154", "value": "t1e441b2181e7817f097355c5e099cfb76d6a330db7e162c338e61e86ae768a838d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59e41d14-355b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585193, "uuid": "42f55172-ba2b-4488-a2cc-51d634cdb261", "comment": "Malware payload", "value": "02e3feff7ccf5a175e0b3b92a5717238", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585193, "uuid": "0f9f3706-9c74-41d9-8616-97c11931d543", "comment": "Malware payload", "value": "f340b2bc252eccf44aca78622dfef66d5dc1cfdae6e29f37fdc36f8241cef268", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "269e3ec5-72ab-44fc-ac14-c01566a49945", "value": "T1F2936BC4F643E5F1EC4709B16137EB374B32F0BA111AEA43C7699972ECA2541DA06B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "243b861e-667f-4448-aa9f-5ad9fcdce17e", "value": "1536:oFd1IRgCXUzx7t0fMqlogQEiyhcg+7ju72wPZnWhZS5xtY+5:oFdmR9XUzxh0fMgogQEimEjLAdew5b5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585193, "uuid": "78a6b36b-57dd-4949-aea8-6d4b8780db5b", "value": 93768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "4a5cd85e-678b-4c8f-aaf4-450bcd7c4d73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585193, "uuid": "1ca39c98-5a29-4caf-a555-55ccfb5d42ea", "value": "t1675123fb5d7e08ecf3d05844c36e0fd2255adb7b146076b245a368a523e7d8150bac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c33b1a2-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585546, "uuid": "1a043fdc-8e53-4954-94a1-59448fbf02a7", "comment": "Malware payload (Gafgyt)", "value": "a156cd079fbd0443c0cc0b4229adcd8f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585546, "uuid": "17b5fbea-80ad-41e9-8c08-660e04ee5a39", "comment": "Malware payload (Gafgyt)", "value": "5442edb10df101698b582dfa2131b4a02e1bf3a8d01665d7997b00a91c970ed4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "c94ba966-2925-46c8-8106-3226828e4684", "value": "T116C37C76DC2A5F68C695D1B0B0B08F792B63B59042875FBA19B7C2B54083C8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "08c07806-455d-442b-a1f5-ecb161a2ed62", "value": "1536:Da60wP/HOD9Zut/aDc+CD0K/nHflnMgEsNqmKW/FRDIhbeyzs:D/P/oaAc+K7/VMgJjKWNRDaeQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585546, "uuid": "fe8e9133-07d4-49b9-bb00-077340190755", "value": 120832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "96deb9ea-9b3a-4391-852b-c7a5ff8cc75a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c4a969f-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585546, "uuid": "eb0bd5f7-6a4e-4abf-9715-ce2be9f891f8", "comment": "Malware payload (Mirai)", "value": "a0dbf4a8815e1de7401a704738fe94b5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585546, "uuid": "3eb281b9-2206-40b3-bc54-f1ee6969e4b2", "comment": "Malware payload (Mirai)", "value": "428f818640139b9a658ec61c9a9be15563e2401856d1512dc863034ca386989a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "0e63a69a-4313-44c4-9862-76b1d23869ca", "value": "T1DEE33AC7F800DEFEF80AE33648570905B630B7E105925A372297797BED3A1991937E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "41348883-5bdb-4674-aca5-4f275b6288e1", "value": "3072:DcyY2gG6CLR72QYzA6NdYNSVrjbilLmj9z/yvvime:DcyvyQgAeYN3LmjVyv6me", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585546, "uuid": "ac22c884-0b41-41b6-b90a-2d678ad1a91f", "value": 154592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "12b6f537-5c75-42b7-aaec-0614a76d167a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c589869-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585546, "uuid": "093fa036-015e-425d-87f6-d8906ff4aa11", "comment": "Malware payload (Mirai)", "value": "faead36808f838d550bbd38957ee890a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585546, "uuid": "7f998a21-484c-45ce-97b5-1cbc5cde4185", "comment": "Malware payload (Mirai)", "value": "1965ca2ddca7832f6de084c428cec4189be4b360347db08c094f32317fbcf4c1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "e25f96c6-84e6-481a-9d5b-79415dc189f3", "value": "T1BC04E816AB510FBBCCAFDD3702E90B1139CCA54722A93B363674D528F54B54B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "0f7cd7c1-505b-4625-8960-b1fc5305095b", "value": "3072:Mwoe3spGZt9nQiX/GpO1SMRpp6NWJdWQ0i:MnSssZDQiX/2ObRWoDWj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585546, "uuid": "75d2ea9e-1d79-49bc-bfc6-8c938bdc934e", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585546, "uuid": "eceba84c-0388-449f-b19d-408f68af1cbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c6d3ff3-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585547, "uuid": "acafbc4b-d852-4498-97d1-be2353dbc0f3", "comment": "Malware payload (Mirai)", "value": "4c3af130e45b27153f34bee3bcd740af", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585547, "uuid": "0106770b-dd10-4b9b-bb5a-3d8a59990a8f", "comment": "Malware payload (Mirai)", "value": "cf8cde740d5e13e6b1b5c9de3ed0239c17c66b0b96eff1aa1e390dd5a2bd148a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585547, "uuid": "1d3af653-0444-4b79-a60a-93438fa5f090", "value": "T148D33B06B30C0A07D1632EB43A3F67E093EFEAC121E4F645255F9A8A91B1E365585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585547, "uuid": "c3dc6d41-cc68-4438-b7b4-3a93db190f85", "value": "1536:O+65RMfLt4/IbIDWgicUwK9xpNvTxNfjbo8PgUF7MJqvAfItK510LHqQe2khhyzn:Odct4dWYUB9xr7x17ga7MdfrhhQ6o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585547, "uuid": "b543ba3a-6c8a-4730-91a1-8e9bc2bc37b8", "value": 136952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585547, "uuid": "6755766a-bedd-466f-96ef-59a7b7c2537d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d2cb0e5-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "7d294af9-8dec-4e88-ac30-7963423d210a", "comment": "Malware payload (Mirai)", "value": "55c260330cb7c76dd157776be4ffab08", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "8d1bd9b1-7656-4129-922d-b69a54f87af3", "comment": "Malware payload (Mirai)", "value": "92e202afb6e5aec8a152515f609e44cb8eb192eefebcc86e522560c85d4d05b7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "155f4492-6a37-4aa2-b797-e50e49ec5a52", "value": "T132E31B56F8818B12D5C111BAFE1E128E37131B78E3DE72129D246F747B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "01e4f085-49cc-41c7-8e2a-1614f80bfea0", "value": "3072:8RZLo1dUL04ElrXueegwnaH3c9jbRCddN+Y6t:8R5o1dwcrXJegmas3AdN+YI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585548, "uuid": "3388a558-b06a-4383-ac2c-8282bbd4cae6", "value": 148092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "35274c18-a975-4e00-8740-79e8897c9a0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "9c2147d3-3c64-4e1f-9d2d-fd2c5bcce5cd", "value": "t1a40123a6cf4d188ce7c38310e1fcd2127073b4621a2129828faa1dcd45612e3b82c4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d3ba8a2-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "2e363241-97f3-43ec-8762-d8cd30f59857", "comment": "Malware payload (Mirai)", "value": "3c13c0af0567647c7b73986c14d0cbd0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "03276c16-e812-4526-b055-d2ddd1e4f17d", "comment": "Malware payload (Mirai)", "value": "473bbc9d647c8b288ab329c5f2a8deb64b7e1e05c776d3fc0ee4e53414606780", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "72339534-fc45-4600-9130-8ce366707ec8", "value": "T187D30945F8414F23C6C612B7FB5E428D7B2A17E8D3EE720399216F61378695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "57ba5e9d-40be-4ba7-adf8-7b7f59d4d259", "value": "1536:pIhcq8nZOrV3HlSdSP9l9oQF+Au4b4Vspf/TZVUDzbSElkzgGBwl2zUwywzFHRxx:pIhuWLJxF+u4QXlVUDzo8GG9OHvQE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585548, "uuid": "14b5d01c-ca7a-4608-89ab-b8af4043e310", "value": 137984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "2cb144e5-17f0-4506-8e46-1ac9c8a6aee2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "d0a45a87-ffd4-4016-bd46-921cc37705a8", "value": "t19211effc4f8c0dd817c5cd85c28fa3153ab4767afa29281288663b0ec1029e1752a0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d5c1f39-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "d5cf86ce-6291-4267-a7a9-fc7f939dbb3e", "comment": "Malware payload (Mirai)", "value": "f9ed2dd96014bdab9ee84cbcdae0e370", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "ed63509b-19da-4267-9b48-9a139ffae126", "comment": "Malware payload (Mirai)", "value": "4268893039530a1b6644d91437ebe111f97703db2ba66de6ba065d98009056fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "f9cc9736-f84e-4dc3-b02e-00c33e73187b", "value": "T193D30945FC415F23C6D612BBFB5E428D3B2917E8D3EE720399216F21379685B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "17e18640-e1dd-4f2f-a9f6-7d2223d8fa1b", "value": "1536:CP8h2C+JG5RHKdC6YwYifeL1qA1R94V7PqT8yZs3OfOJ6q+v/ZAl0+wywaFpOoTk:C0CGTw1w1qK4dq4yZs3Oq+X3sQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585548, "uuid": "86d96302-5d7a-48ea-a48b-0fcf2b135c74", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "59444adb-200c-4b89-a4e2-197aff72509e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585548, "uuid": "e2f8f3b0-bb3a-4754-8906-9f60762fb66c", "value": "t19a117fb94b585e9897e08c85c7cfb1293be57456bb02142788576a0ec6635c1b12f8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e034592-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719585549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "11490ec4-ed63-432e-80e6-5e2a65519324", "comment": "Malware payload (Gafgyt)", "value": "068a26c38749edd2df92dea835e496ce", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "2ce3173f-f14e-4963-b3f8-77c4189e5a5f", "comment": "Malware payload (Gafgyt)", "value": "56cbd66a88a9ee05ad87c13af6bc251aeaae6fb10c475feaad6c6a2487b1fd92", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "440ec401-f929-41eb-80f1-dde5a1abd5d0", "value": "T1F7043A45EA414B13C0D72BB9F6DF42453323A7A497EB73069528AFF43F8279E4E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "be3658b3-4df8-4367-9f4f-94d967e1aa1d", "value": "3072:OqSwFNTSClK1Tvk3ahn4qfdQGGgQzWo6mi/YpEoGM/RxfQkRnSt:rSINflKBM3ahn4qFQ/KoLi/yJGM/Rxf+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585549, "uuid": "805fabc5-4164-4765-8c0a-4b5fe4411898", "value": 184862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "bca0d5a8-6a20-4680-a932-fd26717caf29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "e5e2fb8b-9259-4665-a2b7-f2739970af69", "value": "t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e055d1d-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "5911bbd9-fe82-4232-a37f-8a9d70939108", "comment": "Malware payload", "value": "b7eb963e0339837cd38b3715fcdc2310", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "a62e7a06-2143-492b-9fe2-b876e8aa0212", "comment": "Malware payload", "value": "b150c5801bf2f310d8bb13405a7848b86c697bb5b5a5f10fcae281f6cfc5fdb1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "e0aa227a-97e5-4de5-a5d4-dfbc38c04c47", "value": "T157936CC4F643E5F1EC4709B16137EB374B32F0BA111AEA43C7699972DCA2541DA06B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "52e485c5-4b02-4ff9-9e97-41a69d18eac6", "value": "1536:oFd1IRgCXUzx7t0fMql/gQEiyhcg+7ju72wPZnWhZS5xtY+O:oFdmR9XUzxh0fMg/gQEimEjLAdew5bO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585549, "uuid": "f53335c0-64f0-45fa-b07d-b51b54fc1268", "value": 93768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "15e79bb2-514a-40ac-b108-0c1940a1ed75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "5372bba7-44e0-449b-b609-90965aeab44f", "value": "t1675123fb5d7e08ecf3d05844c36e0fd2255adb7b146076b245a368a523e7d8150bac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e09e4a1-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "cc6aa693-a10c-41cf-8c2b-ec37fdb2bec9", "comment": "Malware payload (Mirai)", "value": "b0e819d33928da8e3bff961d51365cd9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "5ee79c83-695f-4cbb-9073-c3d119a6eaa0", "comment": "Malware payload (Mirai)", "value": "9724e87ba90f959939188ec59ba92be97bda8dfaf7cc729b56af4dc40afd3947", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "bf6e4c36-8bda-4279-91a1-3ee7040acea2", "value": "T16EE34A07B4C184FDC4DAC1B44B9FF53AED32B0AD1238B16B27D4AA222E59E215F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "bc24c93f-9b48-47ae-b767-c0767bb40c8c", "value": "3072:mTUTfCdO6FFto6N68wKhc/t/ekNaogMewcgsK027u+Ol7:mTUTfCdO6FFto62wwQdj7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585549, "uuid": "df44295d-ac12-4537-b9c8-9f46a737b157", "value": 143832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "f422c13c-cf6c-4ba1-8f0b-e39a9e2c661b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "3a2e27b4-945e-4dc1-b62d-e2b2497265fe", "value": "t1785132b438253994b2fbba3ab30af991ac71095419e131d1dd73b8e2de167c40e728", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e12e1ba-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "733a734a-66d7-4ce9-a0f4-1f02c1536b6f", "comment": "Malware payload (Mirai)", "value": "5b85a26f5002f7d4db1de9bc856918fe", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "05e9e81b-1164-45db-ad9f-49a657ba8ea5", "comment": "Malware payload (Mirai)", "value": "3de67b8347b0bc44926058acae6c5659d42a2545648f1448a5ba090de676043a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "edacb037-4d78-4bca-98d9-f44842531f11", "value": "T1FF04985E6E128F7DF668873447B78E25976833DA27E1D680D2ACC1101E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "1fd222ee-6951-4b64-8063-e60750041afb", "value": "3072:f6uSXvJnzjP0jSJzpyi579Yxy52tIen9A6qewZQehaMh:f6uSXvJnvP0+JzYigAEnfqnZNhaa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585549, "uuid": "ab2dd644-bc47-4de6-9597-59f85bdd76a5", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "d2caf77e-829a-43af-a4b9-a0713552aa4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585549, "uuid": "0c7aa75a-7152-4a16-a9c3-096da4490193", "value": "t1e441b2181e7817f097355c5e099cfb76d6a330db7e162c338e61e86ae768a838d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1ca0591-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585797, "uuid": "c1969530-5c1d-4bbe-9a8b-e65d5c1ac814", "comment": "Malware payload", "value": "80fe3cae7826213ac1fd382312e39865", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585797, "uuid": "c885ee2b-6225-4276-b414-ee2258229f1c", "comment": "Malware payload", "value": "29d465623307e39cec1eb9472e467bb5758250f4a2e2aa0c67274ecc5c96595d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585797, "uuid": "9b58f0c5-482c-4424-8680-d019e907f183", "value": "T107E40211B4C1D072D033143404F5CAB5693DBD724B6996DBA3A83B785F703E2627AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585797, "uuid": "3cc81278-375d-41a1-ac7d-6fb6a3366889", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585797, "uuid": "78dd5164-bf26-43df-897d-db1504486b9a", "value": "12288:RafcjuhaNTW5WVZdiYfxnxgMnbEmZjFdHtMWD/7wgrK/Fmn5r3VW/IGrhH:R3oCTWeZVfxnW9yFdNM+lu8n5bpGV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585797, "uuid": "2d1207ee-52e5-4120-b287-19836a4f67f1", "value": 671508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585797, "uuid": "651df280-e61d-4e42-abc6-4b27beebc38d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c42d4b42-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585801, "uuid": "471d171e-bbcf-40e0-8788-d9b6c4bac7f9", "comment": "Malware payload", "value": "2a4155ca43741401f44cff063859affb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585801, "uuid": "a90f9ccd-2058-48a2-85e4-8aec461b087d", "comment": "Malware payload", "value": "eaf34aa272aa6550ae45d504c10f4d90b6609ec7a57bff4ba4a8e8f273e2736f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585801, "uuid": "c8c44e93-fbc3-427d-a0f4-74e55cae7bb8", "value": "T139563363F4809836E038203525F694A2B17DFD7343654A8B73A93A364D793D932BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585801, "uuid": "904f4668-7fdf-426a-96e9-c7032ef2593b", "value": "98304:zapjLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dll+4SfE8Il:uveFb5X0f/o77MvcEyjhSil", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585801, "uuid": "4a2c430a-6625-419a-ac41-e8614fbca1a2", "value": 6247149, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585801, "uuid": "4d37f4ab-90af-478c-bad6-4fa1b88573c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c832c208-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585808, "uuid": "45526f6c-256d-4e40-977f-9f3f663575be", "comment": "Malware payload", "value": "7742fcef7eaa91ed861e3fb60c1ced5d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585808, "uuid": "972ffe2a-4234-4659-b8ae-bc03d1c50302", "comment": "Malware payload", "value": "6a1650fed8381e01485b19b8b952c5d0943162fe386927841935e2f08649b950", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585808, "uuid": "91d82bcd-3011-4210-ba16-8c63ed802cc3", "value": "T1B2563395F0806422F13D183615BA84F2B07CFDB343654A9F539E2A756D383D9263AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585808, "uuid": "10bc1740-b8a2-42da-996a-eb5aa6a1f38c", "value": "98304:EUBC6pOfTFU00bm8FmH/ZtErRoSncMEOJaTMOKXX+C0emOWRpO:BWfTFU3mORH6OJAMp+N3np", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585808, "uuid": "15e575f9-9b08-41a0-93e2-e9a75c868ecc", "value": 6227150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585808, "uuid": "29d4c3b9-a7d4-4db3-a21a-18c0dd576492", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b07ff77-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585920, "uuid": "2f91d8d1-5e67-4e57-9b48-700a48c36470", "comment": "Malware payload", "value": "cea5e05317dfbb1b27d7b6c1d073616f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585920, "uuid": "148c8d81-9658-444e-b056-7097e15c8599", "comment": "Malware payload", "value": "df8019b6cee799129cf8cbfa211a7372be49f707029bd334a56a7a27923b617c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585920, "uuid": "d5a16607-f752-4747-8bf2-036c0fe8a70e", "value": "T182C37C76DC2A5F68C695D1B0B0B08F792F63B59042875FBA19B7C2B54083C8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585920, "uuid": "301bd358-8b20-45ce-8e80-7495624d35e4", "value": "1536:za60wP/HOD9ZyHXaDc+CDIKvnPgtnMggItHmiW3tlD4Va2yzs:z/P/oIIc+KvvCMg5QiW9lDv2Qs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585920, "uuid": "401dcc4e-53b1-4c7b-9fea-b47fc6684f0d", "value": 120832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585920, "uuid": "a3b7aed0-1428-40bd-bff2-0cdb1e43be22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b7ce5fe-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585921, "uuid": "b479694b-e30e-4097-8ddf-4087d248c9d7", "comment": "Malware payload", "value": "05257201028a8ae8483b246698254836", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585921, "uuid": "cab4ce2b-bc5c-48c1-96e3-e3c4976b65b9", "comment": "Malware payload", "value": "bf0aa55d9fc2ee6ce9deb24498a3a4d1c58273af5a2d5709bd48573ee7e9fa9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585921, "uuid": "bd309713-f55a-4bbe-8e92-f9bfeb3cf8ad", "value": "T1CAE33AC7F800DEFEF80AE33648570905B630B7E205925A372257797BED3A1991937E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585921, "uuid": "bbfcda80-1b34-4912-940a-02c74018cfc9", "value": "3072:fcyUygG6CLFjyA4zAKxNY5eVrjbiRLejpfjyDLC0q:fcy3eAAAaY5vLejxyDe0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585921, "uuid": "7310bc37-e323-4e5e-ac85-46d32d9fac6b", "value": 154592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585921, "uuid": "d5ea269c-5bc6-49ca-ae4a-460ad7fd9c96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c8515cf-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585949, "uuid": "f9cfd357-0dfd-4a83-8bb3-ca50b7e68785", "comment": "Malware payload", "value": "df0ab5ee7969ae2e1bd8489880734dc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585949, "uuid": "e6013a04-83d6-4527-abcd-cde5538512de", "comment": "Malware payload", "value": "8b873fd8c4a1dc5e59516cfe8b59d1836bb01d54178c8a93deca6058bf02d62d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "f3f05468-2265-4b43-869d-083568da70eb", "value": "T107D30845F8404F23C6C612BBFB5E428D7B2A17E8D3EE72039D256F60378695B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "be21a4f2-52b3-459d-86d3-908cec284003", "value": "1536:2IXcq8fZOZVxLlAtqFgrVGFAAO8/4VUJzZTr2ExQvJnaZAPsghalifIwyw5FHJVC:2IXmYvFU0FAW4oFP2ExQ5NEgUBpvQY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585949, "uuid": "4d89104f-4bbb-444d-a0d6-c725438a66c6", "value": 137984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "c3cc98ff-d4ac-4df2-a551-ee47167c9113", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585949, "uuid": "9b5d4722-da77-472b-b3ba-4c1b274b6753", "value": "t19411afe44f580d88a7d0dc82d58f71273bb57abaf719182298681e0dc153592b53b4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fca7683-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585955, "uuid": "a24f6104-d9b0-4cf1-8895-a55e2074f1a9", "comment": "Malware payload", "value": "1c16a630f64fcde9c94e5fa219374330", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585955, "uuid": "6d744892-a670-4649-a021-7296a3c5244c", "comment": "Malware payload", "value": "efdf8e6d182ba4644375fa7eaad615b0df41f4e872e1550466e76c8b2d816ddb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585955, "uuid": "c7454914-0c15-433d-adcb-3af2c02774b5", "value": "T11D563362F440E432E038203925F684A6B17DFD7347654A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585955, "uuid": "7dd47e62-b02b-4bc5-824a-cd99cfa8b9a6", "value": "98304:EUmC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+dAnsvxXe+:mWfTFU3muRH6OJAMp+ysk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585955, "uuid": "4c79a480-9186-4582-9ca0-161d632f0711", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585955, "uuid": "67054189-632f-40ee-9a27-de641e8bdd5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25f1181c-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585965, "uuid": "0f2b63c7-0e42-4328-8541-7cbfe3bae2a8", "comment": "Malware payload", "value": "fd7013ee044ed4547f701d01a982b582", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585965, "uuid": "c2194e66-9685-4233-8b8e-c62b48aecf64", "comment": "Malware payload", "value": "f3db48c69ab567343534832dc36b54e8d7adb88405d9b8f5b0fd19d0b5208103", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585965, "uuid": "f27d1a03-53f8-41d1-b4f9-b112979d3450", "value": "T1E2752312F9C0C0B2D036243518F886B5A43DBD715B2A868FA3E47E755F303D5267A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585965, "uuid": "cc2a2ec0-a40b-487e-b18f-6c799a7bc4c0", "value": "24576:E3oCTTeZTfxn19zFdgM+lu8n5bmG6Iemidp1YdGrksfC3fTIWhgbQD+n0StfHryk:E3XTTsTBngQ2PTedXOfTInUC0qrtD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585965, "uuid": "ea8839b9-1363-4164-b881-0899b8583bcd", "value": 1581056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585965, "uuid": "00e08219-2fd1-41c7-8730-fbf5466a0bfb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "265d74f9-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585966, "uuid": "3f66f638-0d36-4cf4-a929-1a139102008d", "comment": "Malware payload (Mirai)", "value": "06c3c1615cf35fc1e35670b71609201a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585966, "uuid": "4691ada7-1265-4869-a258-3ced3fcdc283", "comment": "Malware payload (Mirai)", "value": "eb26ec5c08945b7015eb8e41d4053cf83e0a2844fff6d64cd95402fa8edfc95a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585966, "uuid": "6bcb2109-a0b1-4cbe-b93d-2c2ffaaf81b3", "value": "T168E31A56F8818B12D5C111BAFE1E128E37131B78E3DE72129D246F747B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585966, "uuid": "30948a4f-363d-43f6-a250-d28b4757e341", "value": "3072:DtdOcvkUrcNc1DXfyKowzaOOk5jDAC1ti+Y61:DtEcMgHDX6KoSawm4ti+Yc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585966, "uuid": "aa7a859b-c3f4-4d07-ab44-723335a73e92", "value": 148092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585966, "uuid": "5cfa5efc-e684-4d29-833f-3a670c8b1cbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585966, "uuid": "7823cc83-e277-4287-a8a7-2b6f210a3861", "value": "t1b90123274f2a2a6ca3cbc101919d423aa4b13455071034430f6e0bcbd7905f3741c4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "299785d8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MooBot)", "timestamp": 1719585971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585971, "uuid": "ca1e9e1e-c8d3-47c5-ad27-758d19d82e5c", "comment": "Malware payload (MooBot)", "value": "d5cc4f37b348d7810cdd1248c81fc77d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585971, "uuid": "a13c983d-e4af-40d5-a9b0-5cb52956d85f", "comment": "Malware payload (MooBot)", "value": "3fed42e3e87434331b18a6011be0ed64763a15e4d0ba22c9e4f8693306ad1ad7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585971, "uuid": "53538396-2462-43b5-9b38-637778adb305", "value": "T1C0042A45EA414B13C0C72BB9F6DF42453323A7A497EB730695286FF43F8679E4E22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585971, "uuid": "3d3b9a9a-a1d4-4d74-b3d3-6b76e6c5b499", "value": "3072:fmcRhjDma1W9YHk9ah/QqXFggKkY7mo6lL/2p0o9M/RT7C7dT6:fmgh31W6E9ah/Qq1gB2oYL/U59M/RT7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585971, "uuid": "6f680741-805a-4f09-9d73-2f1ca1bb13bd", "value": 184854, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585971, "uuid": "c63ec2ea-dc25-4023-a1a4-58f04065ab3c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585971, "uuid": "a05e9655-2fbb-4f5d-bf86-e4d078894bcd", "value": "t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "322f36de-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585986, "uuid": "bd4f6892-a28d-4406-829b-5ca0c4e4bc89", "comment": "Malware payload", "value": "e9888d464b8bf86b05e22e8beb04d96e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585986, "uuid": "d7f1f3ae-43a7-4766-8198-baca9c715327", "comment": "Malware payload", "value": "5212fe4f8cd7978b8e6f3ef0b1e46a1806ab043d11b3eb9f9b8e6313ee1eb1f2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585986, "uuid": "5551dae2-609b-4aba-bbb5-7a26c9ba55be", "value": "T13A048C5AFB8300F4ED3702B010E7E7BF1132E901883B8DDBD7C69E4B9DA699615587", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585986, "uuid": "38f89d66-574d-49e4-affc-1b789b1baf5c", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585986, "uuid": "6aea7e0c-8390-4912-9767-297776485c26", "value": "1536:5Dx+n6BFPbLtFl8TYqYpmO5fDFm3AF2ccfPsc4bfGI+Uncvi1pxwm2QO3Nq6XlxG:5D46PTLl8FQmePsUncvKxwazOAhK8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585986, "uuid": "5ebeeffc-b1fc-41dd-b5b1-b69a200e082c", "value": 176128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585986, "uuid": "e4103c5d-8843-4a22-b907-e632edf5c5f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "371b19ee-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719585994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585994, "uuid": "e555e672-805b-46c0-9f39-0e33e7e24d4d", "comment": "Malware payload", "value": "03364eb9ea6170328d51511d7639ba26", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585994, "uuid": "7d200f23-e171-4c54-bec8-1dda976b21fe", "comment": "Malware payload", "value": "23ff85e463672b3939302e967aae890e4ef7f489d9fc434fdfdc62f4f0995eb6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585994, "uuid": "7fc6cafe-d8ba-481b-95c6-6c0d6902ed58", "value": "T112049C5AFB8300F4ED3702B010E7E7BF1132F901883B8D9BD7C69E4B9DA699615587", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585994, "uuid": "81d04ba8-8e06-49ae-8655-3935f08d609e", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585994, "uuid": "999725e8-de70-4148-b489-ed3c47fccf97", "value": "1536:5Dx+n6BFPbLtFl8TYqYpmO5fDFm3AF2ccfPsc4bfGI+Uncvi1pxwm2QO3Nq6Xlx/:5D46PTLl8FQmePsUncvKxwazOAhK0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585994, "uuid": "81df4a50-cd44-4b63-a85b-09e8162d1d47", "value": 180224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585994, "uuid": "36141d1a-ea73-4520-874a-e581ff62d952", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a51e365-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719585999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585999, "uuid": "a2919abe-1cc4-42d8-8d75-01f78aecfbbe", "comment": "Malware payload (Mirai)", "value": "1d9b7192258cf4a001027778a59fdf0f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585999, "uuid": "2d7e74cd-6328-45d7-b8f9-351ba47860c4", "comment": "Malware payload (Mirai)", "value": "ce0e6b970259a2dbea1f63ae7ac1d02df92c4985aa65a43a2269d33d9c6ec3fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585999, "uuid": "e3b5fb24-ec2f-4e54-b847-02cc4b4e44c2", "value": "T15104E816AB510FBBDCAFDD3702E90B1139CCA44722A93B363674D528F54B54B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585999, "uuid": "75093f7d-071f-45e7-93f6-8a3a2167ba8c", "value": "3072:Mwoe3spBZt9nQiX/GpO1SMRpp6NWJdWQQq:MnSsfZDQiX/2ObRWoDW3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719585999, "uuid": "0e138ffa-850b-4793-8b98-187a8e8e4f57", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585999, "uuid": "b709ffa8-3e18-4e23-8ab5-c3b696f7d4f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b03da58-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586001, "uuid": "b2bbf192-d4eb-4364-a707-18d2fe4d9e80", "comment": "Malware payload", "value": "b324d4fd03ee96a240cb8da4a52961b1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586001, "uuid": "1633190a-383b-40bd-9f3f-be3fb6c8d3f8", "comment": "Malware payload", "value": "3cc3fa37a173b0fc57c5cfb70a7664ee310cd8e46795ca4ac9f27544901275ba", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586001, "uuid": "60bfad76-b25e-4303-b72a-15bcfae8d73a", "value": "T1F24162F1E081E8D3D49B23B842639FFC767001748F8286A3CB56597266127F4BD521", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586001, "uuid": "d31d377d-db23-423d-87c0-074a8fa77dff", "value": "24:eR4GSXLRs0kACyba2znlL29LpWzRdJKPHI7i7IpNU0AqzNZu0ROD:jXWae+lEpWzRdIw8UNUaNg4OD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586001, "uuid": "84673264-fe88-4ade-a13c-dbf0263ae2c5", "value": 2048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586001, "uuid": "1f4bfb30-d5ba-44b5-9e67-a21bcad7ec87", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0894b8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586004, "uuid": "3909f903-4cd5-488e-bd54-e6f9772ec5b3", "comment": "Malware payload", "value": "c18bfd7b86979a53a23b9f7399ae4ba3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586004, "uuid": "2f1e153a-36be-4b18-abd5-576874216660", "comment": "Malware payload", "value": "0a39e33d91c0c4ac42de0e88bfceb50ed037199364f5935984fb4f08d7846dd0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586004, "uuid": "31f9ff8d-8b8d-49d8-a2f9-6f96512745ef", "value": "T1D15623713D802A0EF43431B355E954506FC4EA7CDE23A9B4E9FBD645DB6BADC3188A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586004, "uuid": "2f67dd63-4cea-46da-a05b-8fd99327886a", "value": "12288:HVYdEnFattnZ1YSv4c/mv/C7ToQUEGffveWaWjfqXF:c3ZGSQc0snUEGffv1aWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586004, "uuid": "9104d02c-e654-49eb-8df6-1182d79e188a", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586004, "uuid": "b3b4a988-f8ed-43e0-b204-e0d2436759ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d428212-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586004, "uuid": "c10140a5-ca1e-49bf-9c2f-84d1ff1afe64", "comment": "Malware payload", "value": "cc93823addf6e6fb165fe9ac469713d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586004, "uuid": "6ee244e0-4c55-4068-90cd-24239dfc63a0", "comment": "Malware payload", "value": "778efe083950ba83267aa098522c0a3040dedd9eebca437470850ff0ad3e6444", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586004, "uuid": "6176d1a8-d3ee-4c00-a2f3-aa7eaaf62c65", "value": "T15C8162A2E4C5D5E2D45A62FA02AA8BFE7E3802308F4086D7CB356DB164027F4AD364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586004, "uuid": "92e3e79f-5dc9-4d53-9fb0-5a18b19b9d52", "value": "96:hq4zRdIwrXNWO18TmjRNBltq+vEpcb/Nv0hOvBY:ZUwrkOqyjReBM10hOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586004, "uuid": "44a82fb8-6d9f-4e4f-b809-6e7be3968fb4", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586004, "uuid": "c4190b64-a73e-4aba-943d-60acb081f4dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f1f2248-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586007, "uuid": "97615deb-4f9c-4e84-9283-718cbc2df3f9", "comment": "Malware payload", "value": "225479ea9643e5614687db9c9a785eab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586007, "uuid": "21544c89-9de4-46fa-8561-6d4104e072b9", "comment": "Malware payload", "value": "533e54a9ab2b9f4a84fb631a16b8e8f2ab9f918a5b4f2bff4763d5d900201c91", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586007, "uuid": "0de30922-627c-43a3-b08b-7100d107496b", "value": "T17B862296FF4350B4D8670678216AF3BE113EA40089374EF6E7C15BCBECA788225593", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586007, "uuid": "690c67dd-6e7f-4ea0-a458-e0a36b6f6783", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586007, "uuid": "c927a980-3a10-40e2-8f22-c8d58938ec7a", "value": "24576:QWKqa4hnzP3w7L3rmZmpk7FSQFW2iJ+N07/TwYV1CdZdQ+4lT+iFgiGTtswAtdz:QSrwf3aZmpOFU2iQNIUc1LxGTtswgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586007, "uuid": "677e98bf-9adb-4310-b0e3-ab42a4083e7c", "value": 8290304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586007, "uuid": "285c8539-d556-4524-9467-69ed0072709a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40d116d1-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586010, "uuid": "d992c516-a2e0-470d-aa80-7eb7e4cc81cc", "comment": "Malware payload (Mirai)", "value": "53ec49496119ce477f728aee58f36335", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586010, "uuid": "ec1b484c-b9a9-4ede-8aa9-3ece686bb153", "comment": "Malware payload (Mirai)", "value": "8f8fb46d896cebfe3974b52834315cbdcc9cf12e61b4a9f9fa7f324f4455fc70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586010, "uuid": "33b7b2cf-f90c-4095-b97e-63650e70eecb", "value": "T1C604985E6E128F7DF668873447B78E25976833DA27E1D680D2ACC1101E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586010, "uuid": "f62d9cb8-612b-43de-b233-f12be0129a4c", "value": "3072:f6uSXvJnzjP0jSAzpyi579Yxy52tIen9A6qewZQqhaQt:f6uSXvJnvP0+AzYigAEnfqnZBhaa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586010, "uuid": "40fb469f-84f7-4fc1-8456-4b817d0484e3", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586010, "uuid": "1ba88bd9-c0c0-4977-ba05-be3974a19888", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586010, "uuid": "c1f6ccd6-4f84-480d-9ec6-3b1065f6a53b", "value": "t1e441b2181e7817f097355c5e099cfb76d6a330db7e162c338e61e86ae768a838d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41bd5738-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586012, "uuid": "174d6c9e-960f-43e9-a3ea-e309a31a9c64", "comment": "Malware payload (Mirai)", "value": "d0442246392a2679b48460580565df68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586012, "uuid": "047d7faa-d212-414d-b083-20c5cc366ca3", "comment": "Malware payload (Mirai)", "value": "602ec8ee242e3d5e0e67615738b7f8f53369febc40157715134fab54e2053366", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586012, "uuid": "dafd158c-f23a-4559-9423-8c09039f48ca", "value": "T1BFD30845FC415B23C6D612BBFB5E428D3B2917E8D3EF720399216F60378A85B0D36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586012, "uuid": "a1bc7268-7245-408b-8783-2c27e7dc8f4e", "value": "1536:TP8/2CuJG5v5adAXps+lgOh71UAVOsx4VjPRT2dxybCOUA46nRtql0bwywcFN2M+:T0MGHs+2071UTi4lRqdxybL46RQGQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586012, "uuid": "5f0140d3-25bc-4658-b377-84592263fa0c", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586012, "uuid": "0874fdbe-2d70-45d8-87a3-7f99783548d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586012, "uuid": "1b615fe3-76ac-4e9e-a17a-f01e81c869bb", "value": "t10b11cea54f481ecc97e08cc6c38f70293f61315efb122027895b0b4fc4621c0f52a8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "436b4af0-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586015, "uuid": "f974acb8-015f-4e3a-8382-957342e207e0", "comment": "Malware payload (Mirai)", "value": "27eb899e450f1648ab363d26345fe45d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586015, "uuid": "466b24d2-d102-4597-9f46-f0bb59e71470", "comment": "Malware payload (Mirai)", "value": "8aa414132daf218a100017ef7d113c6a7db5d174b2dc1a49525f9fedc51a2bc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586015, "uuid": "b33e9931-4a9e-4d55-a8cf-bdb511b6f636", "value": "T19E936CC4F243E5F1EC5709B16137EB374B32F0BA111AEA43C7699972DCA2541DA06B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586015, "uuid": "afb1acab-6418-4239-8c0e-c3793f1ec4a0", "value": "1536:oFd1IRgCXUzx7t0fMqlXgcEiyhcgSnyy72wPZnWhZS5xtY+Y:oFdmR9XUzxh0fMgXgcEim8yHAdew5bY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586015, "uuid": "7879420a-30ac-451c-8fb1-a4f53d3af6b3", "value": 93768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586015, "uuid": "66efe3b8-45cf-41a9-bd1c-0880fdba6e7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586015, "uuid": "1010a3bc-7f2f-4900-9199-8d3c0455b822", "value": "t1675123fb5d7e08ecf3d05844c36e0fd2255adb7b146076b245a368a523e7d8150bac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46b1f5d8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586020, "uuid": "5ea4c109-270e-4d48-9654-1cd779ecced7", "comment": "Malware payload", "value": "b69cc560afe5288ce15a93dcb5a87581", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586020, "uuid": "0ed83fe6-1b80-437f-8da1-fbfe645b19a9", "comment": "Malware payload", "value": "030339b2534c27b0e133936dccded16feb2d90c86932cb61abffd5ae56134604", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586020, "uuid": "a3f6a020-5ac9-435c-b4a3-f43b3ee47073", "value": "T12D42D7B5E598D272F99842F109295BFEFA35D636DB5090C3CB329CF05801BF886B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586020, "uuid": "07975f9e-3692-486a-83f8-7b795814d565", "value": "192:ZUwrkOqyjReBM10hO52Fv0RJMJ6lsVwQi00H+ddMslwd5McDzEwht+HnrG1vBQoa:ZtkdWYBk0hOk0RJMJrwQiUnMNDK7oTW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586020, "uuid": "bb521613-e82d-475b-b0f4-c74f64bd7081", "value": 12288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586020, "uuid": "8a3160bc-f588-4f75-b5a3-be1e3faeed88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b8aa460-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586055, "uuid": "a3bc5ed7-7089-4cc8-9ea9-c1589e6da83e", "comment": "Malware payload", "value": "af50558b95aa19a3bcd9b69d045257b1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586055, "uuid": "1c722d30-fcb1-4ecc-b100-0c6c9c40142a", "comment": "Malware payload", "value": "b06e0ca79daa1f932ce131a8d4858292e7f4f825d0563a6a2a914b83488f1c8d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586055, "uuid": "b5d4bfb5-5412-44c7-af4a-595dd63ca623", "value": "T114363352F480A431E039153A15FA49F2B07DBC7187254A8FB3AD3E755E346D8263AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586055, "uuid": "6f9aa3ac-7126-4d6c-84b4-5e4771bb9c4e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586055, "uuid": "6de65002-2b1a-4901-b028-d0fbfff53429", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RI:HBfTCiUswVSLOJgyBI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586055, "uuid": "37e05c09-c800-4c40-92a7-cd1d98a329b9", "value": 4910601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586055, "uuid": "28463925-6410-466f-842b-dced6fcbc5c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66a2b6a5-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586074, "uuid": "87d31b70-d030-4def-8f17-1f3f5712f549", "comment": "Malware payload", "value": "5dfc392e899c2955cceed96b3ad7589e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586074, "uuid": "afac108d-560c-4f3f-af11-5935c16b6864", "comment": "Malware payload", "value": "693847a8380ac6b9178e47d81cb919fdce642dd1aa187f143fb2844fad82468f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586074, "uuid": "8494cfbb-b9de-4035-904c-6b81d3c70577", "value": "T13EA4F149FF8310F4DC7702B011A6E3BF1132A9028C3B8DEBD7C69A4BEDA6952155C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586074, "uuid": "4faebdfd-ff16-4084-94a5-86ee366d124e", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586074, "uuid": "fbbdf9a3-e682-444e-b911-ccee36bddd22", "value": "12288:53lIPLUgwq7OB0hROd/BiCBYoW1dnzP3wT:pWKqa4hnzP3wT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586074, "uuid": "c9715e41-d6db-4711-aa0b-7cd767e4b9af", "value": 451584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586074, "uuid": "00159372-22bd-479a-84af-917665ff26d9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a44c69d6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586177, "uuid": "ee4506ad-d115-4015-bf20-d3ef848ea6fb", "comment": "Malware payload", "value": "7c6c40909522acaabef060dfa6e7dc8b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586177, "uuid": "c51509eb-d55b-432c-a7e8-30300b3a50e9", "comment": "Malware payload", "value": "320912430fc4503b650c51c18a3a1992e55040c2567bf0b5b7925dcff8ee57c8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586177, "uuid": "0dd5a028-d778-476d-808d-a914f560b785", "value": "T16615125AFF4340F4ED6706702166E3BF113579018D2B9EE6E7C29A4BFCE6882251C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586177, "uuid": "cb7c3cee-8807-446c-be40-f00286f8c71c", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586177, "uuid": "614230b3-fa60-4e98-bce0-464cf3ba84a3", "value": "12288:53lIPLUgwq7OB0hROd/BiCBYoW1dnzP3wrX/auVF3rmZw4Up3UaeFP6+xUAxFD2a:pWKqa4hnzP3w7L3rmZmpk7FSQFW2iU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586177, "uuid": "a70da637-a714-418c-8973-f981bbb79477", "value": 957088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586177, "uuid": "00ba6886-ce5e-446b-81f2-a12a70f10256", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac93c3f6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586191, "uuid": "74ec8622-fcba-4a5f-a6ee-879e38959622", "comment": "Malware payload", "value": "ee0ff9546dadac9a9dd9a720bc141498", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586191, "uuid": "045a1023-3df3-4562-9769-a76b1851a78c", "comment": "Malware payload", "value": "a59ac7a0024b25a51fa51356e205a2dd2cccc0230c83801b6ed884cd55843341", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586191, "uuid": "bb8bf7d2-1efc-452d-aff8-5e7df8aab1f1", "value": "T15A34AF21B0C0C0B1D073683504F5C6B6693DBD705B68D5DBA3A87B794F302E1667AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586191, "uuid": "d5a46a65-0e69-4edd-91bd-576e20e14f0a", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586191, "uuid": "93e859ba-83da-4dad-ae22-e83cde458494", "value": "3072:CT6QFlX/GFwIqfLvkrQgcTbk2y9GUie/RmcbNTBfovCE2/9gAqGmDrJVL5mtDlvC:MGXqfcjuI2GGMbNTBQkm5V0V3JXti7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586191, "uuid": "f97e5f89-6464-491d-a99c-a866e4c083d8", "value": 242467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586191, "uuid": "06f81ef7-7923-4320-8d28-4586a40172ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7a2272d-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "16733100-03ac-4879-9a4a-4522ab7f6158", "comment": "Malware payload (Mirai)", "value": "35ed72162f2363b3b2ff251e23eb606c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "da9d6f0b-b7c0-48aa-9fcd-ca082f2d74e6", "comment": "Malware payload (Mirai)", "value": "e44b939d924bc44d22f14b04193b899a76012deb266b5ec24d28fc55036551f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "12905703-bdff-46bb-8df8-31cc0348ed10", "value": "T15B835B9AF5018D7CF84BD67B84160D0AB530B2D41FA20F3B63A7BD67EC321A56C16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "36ba77df-9f6f-4ce6-b44a-c8dfea36c1ae", "value": "1536:TwCak38d4qjO18q/3dYahk48zOoQ9ThZEYnjLQlvG4oxeTBnHP:9qjO18q/t7hkk5hiqx4oxeTBnHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586210, "uuid": "ed537ff9-3131-4a57-bcca-1d5ebc080f1f", "value": 82972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "b0a117f7-f474-4ead-b545-1d75c42c01ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ccacd4-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "6941e590-35c7-434d-8c45-86fdeee9f350", "comment": "Malware payload (Mirai)", "value": "29ef2a51434ac48d25ae5d0cae526c42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "4106a59a-e694-4b8c-83bc-0c54d9f61d46", "comment": "Malware payload (Mirai)", "value": "c4ba28639108212f55a01f4f2f5e50916feb232b0ed33526bd569ef53ae2a17e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "2f35b95c-12fb-4747-9878-29bc38f4ffca", "value": "T16C63AE76D9162D94C049817060E8CD7A3B93A5C462A32EBA16F6D2B6C803F9DF44DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "9129d8c0-79ba-416d-903f-eae4dcec5302", "value": "1536:8/E//8AYFayHKisUM6SkQ89F+TykBw2bK66oxkru2POCx6rlwbZnN:8c8NxlsUKkQTTBfe6ou2POllwbZnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586210, "uuid": "d8ace905-846e-496d-9ab0-0185c1aae6ae", "value": 71604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "615cc412-7bf9-4bc4-816a-87391e96c2bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f4341c-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "dce43212-56dd-4133-9ebd-230d4319d936", "comment": "Malware payload (Mirai)", "value": "d22818d0858c27ba055428c8f6f514d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "6208327c-7e5a-4165-8076-d2b4fb3de95b", "comment": "Malware payload (Mirai)", "value": "53134abbd3d0753826d8080ab0cc7a1b735775755235b934df91af41f863028e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "da5f9f5d-0773-45da-9cb7-b4ee6b72889b", "value": "T1F3A3C319BF510FF7E89BCC374AEC1701398C559922A83BB67574D828F64B24B09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "1465fcfd-1fe7-4f8d-aefa-1fb5349cc487", "value": "1536:A5hsdRePY3pfrMTH5+f9zxsaxUD6p/ZRmvmnZZ3dbajRRwbZnbL:isdRePY3pzMTofm6p/bmvYS7wbZnb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586210, "uuid": "6eb41d53-e43f-4001-ac99-b1017804e2f5", "value": 102328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586210, "uuid": "a1c8261a-3468-4df6-a061-3e9690c10566", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8913316-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586211, "uuid": "e9972f1a-a8c9-4d59-a4ba-7ce864c0d89c", "comment": "Malware payload (Mirai)", "value": "5d72baa9593f251ed61016f9d1606c25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586211, "uuid": "756a366f-436d-4916-9415-fefc67749afb", "comment": "Malware payload (Mirai)", "value": "f8f0754a47da802f871a9981474e5149f7f6d3aba5c7fe406037ac6472adc135", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586211, "uuid": "f706014b-db29-4bf3-bef7-96fb0eea0826", "value": "T1E7931956F9818F11C5C502BAFE2D018D371357ECE3EEB2239D106F20B7C696B0E669", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586211, "uuid": "ee14dce9-a59f-47eb-8884-3638269ba658", "value": "1536:tCn82Mir29dYMj087nagctyV8ajLWQf0jUKa+vdotMuip3gbVusheq5IY+wbZnI:f2li75haXkJfXKa63gbVusheqmjwbZnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586211, "uuid": "2d2e3223-4c2d-4239-8531-b5e26ab68e7e", "value": 92768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586211, "uuid": "800204fa-9c14-4abc-9956-a0e6e9033cb3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586211, "uuid": "cdcd0cad-a65e-44cd-b497-85f89717b6ec", "value": "t158f05c72ca4b0b4ca9f8c49498efb1008a5cb1d42b46205e947ebf0b90d3046b22d0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d6852a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586213, "uuid": "f3b79d8c-1f10-42bb-bf9f-947b917878be", "comment": "Malware payload (Mirai)", "value": "6f0266525619daca31310190006fd25e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586213, "uuid": "4ec1110f-768f-4178-9682-e4635ad47712", "comment": "Malware payload (Mirai)", "value": "ee7ab36a962e43f70c12c5dd349cd97ce0aeb2a2bf3f522cb8e3d91654333583", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "ae4e5215-86e9-48aa-b42e-a58e56cb7d53", "value": "T190733956BD825A13C6C513BBFA6E058D372513E8D2EF7213DE122F20B68781F0DA7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "717f184d-3ad4-4d5c-8c92-3ad725a8efd6", "value": "1536:qYcCletG5QuehLG0MzLchjyQC2aSfdH7dnzfyPwbZnN:qNCleqDzUyQC2aSVJz4wbZnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586213, "uuid": "67375db3-7282-402d-9ca1-316819737783", "value": 79164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "0d327475-1131-4db7-9263-e11f1540385d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "865e2dd0-e6c4-4df1-9d02-c28c3b4dd609", "value": "t18e41dbfaabb50bdd6bd49744c6cda0294eac32ac2b152962c948775fc9925c2b00e8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9df63b9-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586213, "uuid": "a5b6b666-ac91-45b9-9ba5-0335d45c522a", "comment": "Malware payload (Mirai)", "value": "2e6b5df49d3a4d97c0e7077b35f3f791", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586213, "uuid": "efa56768-506b-45d7-8ab9-6354d19aa81c", "comment": "Malware payload (Mirai)", "value": "f6eae20ee8dabec209cd9d3488742ffb6d35ab29a1334c5a4fc776a605748dbe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "1e2f563d-c8c4-4a9d-885e-2742a0c37b19", "value": "T162834946BD824A23C6C553B7FA2E458D372113D8D2EB7207DD226F21778781F0DA7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "70e72593-d6a0-42c7-8cec-a9b494e43c91", "value": "1536:y095vVRbqZz4eL/IdqMchLcYnCWlRFuCKwONDxvMSwbZnN:y0zvVRbDq1cYnCWlmzMSwbZnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586213, "uuid": "05f21de3-bcec-4762-af2e-517190f06b17", "value": 83260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "634bc4e3-f50a-443a-8ed3-c5ac5c1eeeea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586213, "uuid": "c724ad87-7517-4cd8-aa36-87db5b7fa122", "value": "t169411ff6cbb10bac6bd4978482ce50194bed35ed7b113963c64ca78fc6a3281f10e4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9ff8277-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "a82be676-8e0b-4046-ad74-2b10cf104db3", "comment": "Malware payload (Mirai)", "value": "cf21d770ea27b74593541f9276fdc65c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "7bf94f1d-6774-457a-9167-9229938d84d4", "comment": "Malware payload (Mirai)", "value": "a012620f4d0f60afb09708ee6264a756b8e73fc8701efb59c4f0af2ebcbc6f49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "dae654f9-bfdc-461b-8d56-b6f0a1aaf2dd", "value": "T1A9732A47B58199FCC05AC0704A6FBA36F962B1FD1738B1A727C0FF226C4DE605E198", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "15f7ce6c-2957-48f8-a55c-36e9722c7eb3", "value": "1536:S4wLqHm7EJ2FB/cBGTLNPzYjd3PH3mAj9X77a3qSa9EGA61GaLQp1X5FwbZnx:S4wLV7MARKOLSd3/3j9L7ZSbGAGLQp1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586214, "uuid": "99ba87c6-8caf-469e-9e90-a01dbfecb33d", "value": 78784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "8e568ec3-6aae-4deb-813f-a7f08a6170cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "e2d60f2c-6194-4e44-ac18-d69495974cc8", "value": "t12521dfb6359208a091ffea31a261f1a129300f7140f2b5e2de7198faef573c95d950", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba0328f0-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "89385cde-42f7-49ad-b977-08413d89208c", "comment": "Malware payload (Mirai)", "value": "152b0533b5b6828ed6dae81dc6a3df7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "fae3c8c8-9277-4b91-a206-49bd5916f051", "comment": "Malware payload (Mirai)", "value": "2cb96f50935340a227fb46db62b474e8c89cf20c5cb73e005008507cf2129808", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "72765473-cbee-4426-8200-a16b5b38e55a", "value": "T19AA3A50E7E118FADF7A9C23447F78A22A65823C537E1D585D1ACEA015E7024E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "8433010b-27ae-4ca3-b954-589b437b689e", "value": "3072:sKXLKPTGN8TbmxrWtaL7pWWq0L1wbZnb8:FLKPTGN8SrWtaL1WnEwRb8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586214, "uuid": "d51b4106-1a8c-4040-892c-c131e364239e", "value": 100712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "8b67db3d-c7ea-4233-af63-094529fb0ada", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "7ca9f136-4c56-41f3-a7a4-c7494b7a4fef", "value": "t185117c088d3813e09b761ddd2aadff73e56170eb4b215e378d00b9acaa2dd425d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba044697-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719586214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "0787f2bf-cde0-4d6d-934e-402b72c5c177", "comment": "Malware payload (Mirai)", "value": "954d0de353ab0a9104fa7f41f5a89d78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "fbf72e10-cbd5-4b50-bb7f-cce7096d5338", "comment": "Malware payload (Mirai)", "value": "7707d7d0ac6a23e77eb0773a93bfddc44b18da7a6a3eadf663e998528bfdc299", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "84e0a399-5878-4312-a608-757cee923e28", "value": "T122F34A56FA814F13C0C61776BA9F424A33239794D3EB730699287FB43F8269E0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "699bec62-4250-4f63-adfb-b852bd548a9e", "value": "3072:/DlNiBbngXHDG2a2Awjo7DA3TA9Aw1YSwbZn5d6Bh7M/91Tns3b:/RWTsjG2a2Awjo7DiTAxLwR5d6BNM/9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586214, "uuid": "a7223806-5721-4f99-896e-dc27db166c9a", "value": 168461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "e27ec13f-2577-493c-b685-6b211a1dc3f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586214, "uuid": "feb14cac-82fa-455b-95ac-afa086eade8a", "value": "t19121fe7157316225aa61cc94d8fe97b2112c97131348ef33de26808c281a09eea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c02bf33a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719586224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586224, "uuid": "49389fd8-0d6d-45c7-b4ed-a0851e37259e", "comment": "Malware payload", "value": "01e7c64aa0157e9cb2cf69705f3cfb4d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586224, "uuid": "21a36ec2-66ba-4a79-906e-83d0ac76badc", "comment": "Malware payload", "value": "b550d9689f62260c1705fe115596497e97263e0cc1b44b91b7f1adfc398cdae9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586224, "uuid": "c039956e-643a-4683-a05b-6f1e619b71b6", "value": "T110563356F040A435E039147A25ED48A1F07DBC718B35958BB3E93E712E393E8257EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586224, "uuid": "c299b71e-9cc0-40ee-bf22-1b95288017e6", "value": "98304:zaejLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dfe7u0MEGCD27/XnM:7veFb5X0f/o77MvcEyG7udlp7/XM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719586224, "uuid": "b549d3e9-3561-406a-8a3a-00b69a58fd2d", "value": 6225897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586224, "uuid": "2c29df15-0f34-4500-9636-b07dd47a0f43", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee6890c-355f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719587054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587054, "uuid": "8fe33c56-1efb-48e6-810c-6e6b192c11aa", "comment": "Malware payload", "value": "3baef1ac80555b67090bf229d223d1d5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587054, "uuid": "1cb53093-7087-4f15-8edb-5b92eef32a2f", "comment": "Malware payload", "value": "7c57e7453c5c68cd5bd7ab1caf3b54a0dfaed8ba04400317f2db7c3a7bf1cf47", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587054, "uuid": "a8aef11d-88c1-4394-95a7-0e60e5a2957a", "value": "T18C159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587054, "uuid": "5ce0cdbc-162a-49bc-8938-58986c0a79ff", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587054, "uuid": "c2842ee2-724c-49fa-bd74-a57730eb23af", "value": "12288:BqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tx:BqDEvCTbMWu7rQYlBQcBiT6rprG8aAx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587054, "uuid": "ebb70184-c268-4e44-8233-81433acd80ff", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587054, "uuid": "9706ccdc-fbe7-4216-b20d-b6dba7a7db81", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7989a17-355f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719587176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587176, "uuid": "5c4e09fb-8277-4db4-a27d-d3933246636e", "comment": "Malware payload", "value": "dd380dedd6a1eb1469da9aac11ecbade", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587176, "uuid": "1d0bda31-4677-4322-a102-c5bcdaef9ee1", "comment": "Malware payload", "value": "20641d8d3de5a41eb2dcf25540005949308e7f0740abd35fa1aa3910669fbd10", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587176, "uuid": "59406c6b-b43c-479a-951f-957150bff16b", "value": "T15FD3D064A980D133C807E0B16629A7C1DF7E593020FDA4869FD628796FB33D8632F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587176, "uuid": "e8369271-6315-4d29-a57b-8dd441003499", "value": "3072:cC5ALIaNu51dqS3IyfBF4C8DSOjnVeIqsoU:ULIaHyfclDbjnVPHoU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587176, "uuid": "051c93c5-706c-463f-ba6f-ade9eed42821", "value": 130556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587176, "uuid": "b0217409-cb12-4e52-840c-cd3a71eb6f28", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5de7b954-3560-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588333, "uuid": "5a32cd4f-537c-470d-9dbd-59df8ca7d7db", "comment": "Malware payload", "value": "0f1b92a7b10eff84082685140c69c2ee", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588333, "uuid": "43c273da-7824-4888-8a20-795943bdf6e1", "comment": "Malware payload", "value": "8249f92930f292f00a98d7cf9461d9c9205dddb44f8073f5e0a397dc1f28de91", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588333, "uuid": "7eb4f776-1782-4f71-8085-dba4dad97504", "value": "T174B53395C4C38CB4C9B4C3369BA20DEAB67C3E30DB9767197600E67EA4163A35453E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588333, "uuid": "3973cccf-597e-43af-b171-ea88714ccd01", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588333, "uuid": "fb5d98c5-5910-4c33-93d9-6ab0bfc1fb6e", "value": "49152:hMExlTKqsDTCHjbik471fN0TE5roqbZnXe1X/fafRVP9J:hMqTKqsnCDM7RioroofRVPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588333, "uuid": "68f98e92-e8bd-4ecf-98f7-ccb54e5cf40f", "value": 2354688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588333, "uuid": "81dbea03-1c5c-45a0-9648-df529ecd59bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bc01a0f-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719587843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587843, "uuid": "8ed802d9-9e4c-4c88-a63f-c58f656562d8", "comment": "Malware payload (Amadey)", "value": "e0e54a14540417575507e62c050304dd", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587843, "uuid": "98d1a436-1309-44f6-89db-86effd534b6d", "comment": "Malware payload (Amadey)", "value": "c1e08b7c07050d895a716b3ee2b973b335b195212a88fede714612dcf6d2ff2a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587843, "uuid": "e8679161-6630-4d44-b89b-b6dcce3e51ef", "value": "T1049533A02D767F85C971CA339C2BB4953CB12B1915D7FB36580C4B3B964F7820A269", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587843, "uuid": "91023d5b-8c33-4c03-a1d9-3392428cb0d5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587843, "uuid": "9a64c223-a293-4b14-8c37-d6d09813b60b", "value": "49152:yAIOq7TbSfEYjZ7apNdkqsecZRWn4911nm5HUHl6:q93BYtapPkUc/VmGHl6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587843, "uuid": "f78ff903-4154-4412-bd0d-56e869708e50", "value": 1908736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587843, "uuid": "79f5ae5a-456a-4aaa-8f58-b32dc1f0a50d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f78b8bf-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719587887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587887, "uuid": "29d2f8d6-f2a3-492a-8297-65cd77767795", "comment": "Malware payload", "value": "fa835989c8e8f64c6f4c611f933d7b1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587887, "uuid": "0f60af50-34f7-40b3-8289-3e99af0b8641", "comment": "Malware payload", "value": "3280430e33a42af6803bd29b88500b041d7cf9ab1b5a9da5f072a16dc880f9bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587887, "uuid": "ed78545c-5cec-47c3-8ece-21c622f3e0b4", "value": "T1954109CE18920575ECA3991F7169C524B1C6D49A4DCAAF07E8EC7CFA42DCE04A8417", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587887, "uuid": "1feeca5d-2fd8-446d-9f7a-5dd3acf35cf9", "value": "48:vnyFEGn0/H+cn/ytpLnIDCqJIyLg4aHtALogEHInV7Mrc:vnyFEGn0f+cn/ytpLnIDCQIyLg4itALP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587887, "uuid": "e37fb242-3d60-4bff-a3f5-7618741df746", "value": 1998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587887, "uuid": "e6f00abc-f2fa-4b06-8549-f09916cdeea4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a07e8d4f-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "627c9169-5d13-47f1-9b3a-e8547fa6a922", "comment": "Malware payload (Gafgyt)", "value": "f1fbc276cf4312b48213737d43384074", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "2f492392-72e7-41fd-aa54-63824ffcfb0b", "comment": "Malware payload (Gafgyt)", "value": "4b167fd6911cac6968610cdbfb46168b5b570e4e9f4f379be602d9a77be1cabe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "8c1c79a4-bd53-458b-b995-9c93fbf6e0c9", "value": "T112A35C57A32E0643C58B4AF029FB2BF147BAE8E022B25244951EBFD41773BB41453F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "527a823f-7d1a-4cf2-9691-f729fc85f836", "value": "1536:EsEvgw5UlLht5p6tO6UOk0tt8HkCW65P/9C7VH+kKmmsCskFw3DW:FYp5etmXltCo+WmDski3DW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587889, "uuid": "153dc3cb-43c1-40e5-80de-dee7e166f12e", "value": 105289, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "1b2c6456-dea4-47ad-a893-fc273c7ec42b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "bfc7954b-71f9-4889-96be-3fd5bf556420", "value": "t15211f01361b6ca1d5bb659348dfc47f0156127336242be71bf0dc5c89537042b93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a6f263-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "7d0d4e80-6eae-4b7f-a263-73e993149198", "comment": "Malware payload (Gafgyt)", "value": "c1be5dfd413c5708f3bfb4d4a9ab2b4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "ba03ae51-1b3c-4634-8046-efe00d00b076", "comment": "Malware payload (Gafgyt)", "value": "91a8a84b99ffd438de82cdec7669606faa64f73df00d012d053355f6ef1fc624", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "e128d5e0-d5ef-49e5-bce3-4d88aac2eae6", "value": "T17FB31A93F511DAB6F40AD63308D78B247670F7E14F531622A3173BAAAE361D4385AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "956bd6f7-4655-430f-b172-a773826f1f20", "value": "3072:EcQeqacWucW0JcWcByh/LJyISQ42r8O7WFqLzS6F8cmmHqzTQKHKtW:EcQeqacWucW0JcWcBo/uQtr8O5mKmmHe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587889, "uuid": "f9b89b96-5584-4c9e-a725-0b6d0baaf694", "value": 110615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "664c8c0b-89f2-489c-8b49-89e673063f04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "1bd8ebb8-f0d0-4c12-80f9-1aad5011cc49", "value": "t1f6110d13a1b6ca192bb658348dfc07f015502b337242beb1bf09c2c8853b002a93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a72047-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "7b422132-0651-4282-a3fb-a3998cc78ade", "comment": "Malware payload (Gafgyt)", "value": "9692453cc4fc89e8fa1d55feb3812975", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "fe32aeb3-57b9-4e2a-94b8-fcdbfa720830", "comment": "Malware payload (Gafgyt)", "value": "5d03b365be909a0a12963de430756131a603cb6d9ba31f5c87be3dc34c807495", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "34a5d18c-ecc0-4c1c-ba11-4fe0bff0a8fb", "value": "T17BA33A13E6A0983FC48753B61BDFD6229523B8F9073261072394BEE42F169D6DE993", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "987d0bdf-4586-451c-892a-1cf6135babdf", "value": "1536:XeYViu+oIe/IvF+6BLFLbXJM9wyQdPjFrPnJrKLs7MuCms5TDUMHYr/:Xl+oT4+CZzfdP5/JrKLsCmITDfHYr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587889, "uuid": "79cc6de3-6df8-4713-815a-bd810e460a3b", "value": 102437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "8068ca46-eaea-49b3-8a67-a7fac173faba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "65125a64-aafb-4256-a7e8-2f1efee5ea83", "value": "t13a11d01361b6ca191bb659349dfc47f01551273372427e717f09c5c4953b042a93dd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0b40f35-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "5b154322-8620-4929-b01b-325b82c942fd", "comment": "Malware payload (Gafgyt)", "value": "1f0e4ca688a331f169a02c6c4795406c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "fd3558dd-e517-4ad6-8a01-c83d5c23464d", "comment": "Malware payload (Gafgyt)", "value": "3e09489ca4c55bf2804a38e5071b2b5d7421372b20d6dbe83f77b722147112dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "e12ba458-ffad-49f8-946a-ad254bce331f", "value": "T1DA832C06E752C2B3C4831BB502E79B370631F9964B1B5F09E36DAFF86B025C4319A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "c10e6a2e-d50c-42e1-92af-84dadd52bd14", "value": "1536:pQc35rR2ffwijPta8ZI3dRyNGwFy2wA55jdoL5AfFWm5CsNFPVYLf0:2GrafwmYUQSN3U11bmwsN1VYLf0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587889, "uuid": "20512a75-6f55-40a1-b141-948c0d32d218", "value": 88337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "b04712e3-1d46-46af-92bf-76eee1de9001", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "13c7345b-9560-4021-9ae8-77d51e4a6dca", "value": "t1b311f01361b6ca1d5bb659348dfc4bf0165527236242be71bf09c5c8893b002b93ed", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0e4cf0d-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "d7f9f795-b7a2-43d1-b43c-c7a9b73ce908", "comment": "Malware payload (Gafgyt)", "value": "8db848603fb4a7cd6e596568c504a79b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "459919bc-4226-4f59-ac94-26a3c0bcf008", "comment": "Malware payload (Gafgyt)", "value": "3137c75fab2df7ae7f75b5330d6cfc54af9c211054afd2f42f27b166d18b388d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "ea8caa79-e5e5-44a2-ba28-d035914c2c9c", "value": "T1FEC3182377270A23C4E6503441E75737BBB9CBC435B49247AAD0AEAC2F1AAD434537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "67b9f3cd-8c50-4324-8752-a5a2e525ac6e", "value": "1536:g7ob/WSIN4tFCed0vhmFHRdCw+gt8tdls/v46rEGmuwA/KiyYIW:wSINUFDFHHpzols/zEGmuwACXYIW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587889, "uuid": "612a6efb-89fd-45ec-9b78-8990a9aedda8", "value": 120992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "cb70768c-7397-4d4b-bd84-af429d925ac6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587889, "uuid": "be44a9d8-187a-48c3-aca5-7e4882e41514", "value": "t15f11f31361b5ca1d5bb659348dfc4bf01555272362427e717f09c5c88937042b93ed", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a100b290-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "af78469f-6690-4101-b8c6-2e9ad02d04bb", "comment": "Malware payload (Gafgyt)", "value": "dd684a97f43412babe45578e68f8d789", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "91ed6e19-883f-49eb-a638-1ad896a8f4e2", "comment": "Malware payload (Gafgyt)", "value": "03be42f6edfd27ccd5797ed071819b066c0e49743bce1c1170191de3de6b9dde", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "fb29bda2-6b42-44b5-b780-652b5d3d3f17", "value": "T1ACD3B73E7A21ABFEE16D823107F75F6087A625D227909345F26CD7182E3128E5C8FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "6e8f24a6-cb72-4a37-8fb1-956f0963dff2", "value": "1536:wHf2lkeVau3uaiIF2rK3V64Fi8HpoZceeQnudfQzgpMx725QlfDsXbmnLakm/KBm:3hb6ZceeQud9pMFrsXEnmCBgAYiCh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "c94f28ec-8437-47a1-b46a-7f4456497fd0", "value": 140044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "a37c217a-7ce3-4a81-97e0-f0376d3064ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "2d835349-ef36-4e90-bf2d-8ca9a548bfe5", "value": "t1e311f01361b6ca1d1bb659348dfc47f0155127236242be71bf09c5c88537042b93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a117a182-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "c9f4e942-fdd5-40a4-bf94-11db1290ffe1", "comment": "Malware payload (Gafgyt)", "value": "062861b5921566161bc9afe473f334f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "f0af8255-6fd7-40ac-8e9c-8c2753b615d8", "comment": "Malware payload (Gafgyt)", "value": "ab2b93900a297cc2850e62bd86a813e7a09a3745bfbeb7ea12d1a37d938bf48f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "7f7c6615-8b5b-40eb-bd94-6600a3ee31a7", "value": "T123B31901E6548627C2D32B7BA79F474D37329A9467E737141538BFF03BC27992E2A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "ba1345fd-8fa6-4e57-9b76-a20a16d78278", "value": "3072:vgivNO+pFD9Eoww8tzsvzhcf7nkCBecm7QnKQXaeW:vvz2Hw8evNq7nkCBecm7QnKGaeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "f2dc0627-bb44-41a8-a9bc-3528ed3bfca8", "value": 111518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "b8c6d8c8-91c7-4727-9065-e49adc3d353d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "f79db5dd-4ef9-448f-973e-e293bf91f512", "value": "t1b711dd13a1b6ca192bb659349dfc47f015512b337242beb1bf09c6c8953b042a93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1495664-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "259ea03c-e6ad-4e3a-aed2-7a0c9b6980fe", "comment": "Malware payload (Gafgyt)", "value": "658a433c7426c352d9fcb2b4ca28b29e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "35b60191-d565-43a6-8219-ee0599fb963b", "comment": "Malware payload (Gafgyt)", "value": "288952f7abbf2fe76764ad920abcc0760b0209f0ba42e1fdd3cbe59f506744d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "f5d1a546-4182-475b-ad6a-7dbe2fa8fd46", "value": "T1A8E32905EB408B57C1E2277AE6CF424A33339B94A7D733055638ABF43FC27995E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "e7cb3015-a9d9-42f9-98d9-b80c470d0277", "value": "3072:2sMJ59IpZODTvbaCJPeCF7p8b0xVR3DTmQwfCMQiGW:2DJ59IDOvvba+/F7p8wxV5fmQwfCDiGW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "73208e58-8f58-4562-9103-278e1bb0294e", "value": 151054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "c09b0e03-48d4-43d1-9d6c-07ee6ab4b87c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "9716556f-21ee-42a4-a2c8-53b5257c118b", "value": "t17011f01361b6ca1d2bb659348dfc47f016512b236282bf71bf0dc5c88537042b93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a14a6c9d-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "1152be26-7a91-45ff-a72e-8c01b120e1c6", "comment": "Malware payload (Gafgyt)", "value": "d87927c351091215d73b7097b1707d2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "fd82539e-e6b7-4eb0-8ad2-d8983c95a7f1", "comment": "Malware payload (Gafgyt)", "value": "18e276af950c7dde0d853212fee3b548d77e9295c92e4441b2afcfd1ab63ca8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "cde7e3b0-1a14-467d-a964-ca7d396af56f", "value": "T1BAD3C617ABA25EBBD80FCE3301EA4611108EE5D613D5AB2BB274CA5CF74B94E09D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "07c293f7-6702-4387-b990-e66ea8516fa6", "value": "1536:/6ej+UYBKC7JciVVSu7ZyY6/SacqQnhul+m/KBgvYYiCh:/lC9cibCKaVK0+mCBgAYiCh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "fb3d106a-f52b-4328-b7fa-57d81e27af84", "value": 140060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "265035d5-e35c-4e15-b18c-6c2f75dcf3a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "498c8934-7bd8-4c79-bd5f-55e3e2330dd9", "value": "t1e311f01361b6ca1d1bb659348dfc47f0155127236242be71bf09c5c88537042b93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a15b5a9e-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "36f0e9a0-30b6-446a-ba75-74e3690229c5", "comment": "Malware payload (Gafgyt)", "value": "3cdf7ff718ca721ea5036094d9c2f3cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "4931bca5-44c3-49d3-ae4a-575907e046be", "comment": "Malware payload (Gafgyt)", "value": "7cb05f774b9f8d6518448d7a918d480b9c6db1c30c952892118ce194870c291b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "7d07dba0-ae12-4a6d-b6ce-21c399ffac29", "value": "T169934A47C1719EF3C043AEB926FB9A74072368A14B4A1B64612D9BF4070B9CDFC8DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "6aeb8da3-77a7-4380-8217-c33de859db95", "value": "1536:zebk+jSGxV32F/5onoVZ9fLqbXfmoDs2tSYVm+:zb+jSGxJ7SfLmPm0s28YVm+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "628fb60b-6004-46cd-a4b2-d515daf0b7bb", "value": 97445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "9bcd137d-ee95-467b-8767-b95f2b2361e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "64e65c7d-52eb-4e9f-81b1-5ecaa36ef37e", "value": "t1ab11f01361b6ca1d1bb659308dbc47f0155127236242be71bf0ec5c88537042b97ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1639aa0-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a2be22d4-b245-469f-a0bb-135a77ee65bf", "comment": "Malware payload (Gafgyt)", "value": "ae2008f9282b32a1bcaed98ef3b3eb27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "219efc8d-29e7-4a75-a5ea-61d13e5b3731", "comment": "Malware payload (Gafgyt)", "value": "870241c6ec985a3d7000bb09f78aadff86b5276ab55960a7d41414cc1e9e5742", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "388a1783-ffe6-479f-bb02-7dd791278be2", "value": "T1D6E31805E6408B57C1E2277AF6CF424A33339B94A7D733055A38ABF43FC27995E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "36e8bb10-5fdc-4e15-a966-f6fa4e7fddbf", "value": "3072:qsMJ59IpZODTvbaCJPeCF7lTwH/W/3DTmQwfCMQiGW:qDJ59IDOvvba+/F7lTwH/WvfmQwfCDi9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "817d6b9e-73dd-4e53-af5c-a7fee838469c", "value": 151082, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "9b97e839-9ec6-4226-bd9e-7512718f636e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "be5bb749-01e5-44cf-ad3a-762d2586e1b0", "value": "t17011f01361b6ca1d2bb659348dfc47f016512b236282bf71bf0dc5c88537042b93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1761760-3561-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719587890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "96f1fae3-cc08-42ff-a7d1-013feac15cb8", "comment": "Malware payload (Gafgyt)", "value": "2f30c8ac6e2150287bfdfdd5e8abd429", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "af44296f-f941-4963-ad0d-2bc41f39edcd", "comment": "Malware payload (Gafgyt)", "value": "8e40a308ad52e314589a16eff182701875d47e9bd9d976c1c03adddeb23ef359", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "a2ed5de9-7f4d-4e36-859e-9427f97fae9e", "value": "T15CE32905E7408B57C1E22779EACF824A33339B94A7D733055A38ABF43FC27995E225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "e06a4c04-212c-4cae-95fd-8b163b024094", "value": "3072:2sMJ59IpZODTvbaCJPeCF7IISV7R3DTmQwfCMQiGW:2DJ59IDOvvba+/F7IISV75fmQwfCDiGW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719587890, "uuid": "8deac62a-3e51-46d6-94c2-a54ce2e64063", "value": 151054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "644538fe-f2fd-4d80-b0ed-32e60da1026b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587890, "uuid": "6ecefe67-56de-4f46-ad0c-c2657071dbd4", "value": "t17011f01361b6ca1d2bb659348dfc47f016512b236282bf71bf0dc5c88537042b93ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebd64d16-3562-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1719588445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588445, "uuid": "31484a5f-c458-4e25-a546-5bf63b23ff7d", "comment": "Malware payload (Socks5Systemz)", "value": "58dad2a6ad8cf8f0effe4a60a625a7b1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588445, "uuid": "0559f8a4-edd9-4694-af14-444bbb337eb2", "comment": "Malware payload (Socks5Systemz)", "value": "2ea3ed2b71990bf8be9e338602962ae956428513f9bc7cf2a74efe20c53d05e2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588445, "uuid": "20aa65e2-e8d0-42be-a7a2-8881d5325d6a", "value": "T1BD3633A9E0AE0473E4B14C305E238616B7A08E3633E47754725FCCD9EBA55A79D923", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588445, "uuid": "997aa5d9-8ba5-46a3-8cb8-99f134466b60", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588445, "uuid": "61b52ef4-674e-4328-b669-26bb0a2ace14", "value": "98304:CguimEB6OyqCZ/nWBY9DP2W/hECOOccWAzTaMIUaUGNffS1iNZ0RLLYLeA7MPOQG:MjEMqo/WKx5DqkNuffm8+LLCekMPOQG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588445, "uuid": "55390f70-7325-4bc0-98ec-9944a5599f86", "value": 5164765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588445, "uuid": "c32bfd21-02f6-45fb-9a7b-d36c389255e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73d9b371-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "71b18095-ec9d-4f07-bc40-d5c7debcb227", "comment": "Malware payload (Mirai)", "value": "523b22a775ced0b9f95179d343001b87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "d5d78086-45ec-43d7-8b9d-27ba7bc2ebc3", "comment": "Malware payload (Mirai)", "value": "810a0b774bbcf79549f86fbae4699947e38e08182903b9f177dc3287d0c8176c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "c548f906-def3-45b5-a82a-4f9bc5e6f4a7", "value": "T171538D75F0281C25C92412B87629C9381313ADA561E63C72EFCEDAA540ABFECF54D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "056e8547-d388-4c7f-b81c-d0d06216e405", "value": "768:PLP6yauS0uFsOGXiGZEoXfEPS9OdzF5k5l8NAdG/QezHWaPUPmrkK4mE:TPvaZKpX4oXRgF5k5l8B4ezHZf4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "45782bdf-7591-410d-8fa0-fb02a2cd0f38", "value": 62068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "95591a3d-1cc1-4233-bd88-c99cee9458a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73f42971-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "24fac610-2065-4bc1-b1b6-085fc69925ac", "comment": "Malware payload (Mirai)", "value": "8a88c7641ba5e8722c1289e6054fbfed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "9b45609e-ee39-4ab3-bf0e-9bced4ca9170", "comment": "Malware payload (Mirai)", "value": "6412743d813790d516ccf1da96c33d50163272308ad516c71a0b3bd51efd4811", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "4ad7a20a-2910-4ca1-9e84-23886f49d34f", "value": "T11E337D36E4286CA5C91016F47629C9385703ACB661D23DB1AFDE988500ABFDCF18DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "c54b23c6-f06d-4f61-9b8d-18f8b757a708", "value": "768:TRPtCg/2ugO72+PGXHA0WmVQ/UvN1jNYrH0CZnTnvukR0hE:tPEC2W5qD5ZNYrHGA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "c2f56632-cde7-4c7c-bd78-9b9aaa6e3d6b", "value": 54452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "91f91887-ad73-4536-9edf-98e5a87e580c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73f62398-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "89209b5e-3bc2-4678-b0ed-5f2e4571f9f8", "comment": "Malware payload (Mirai)", "value": "dd408ccb04f29f9479ce6773af230bd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "fee97900-32d9-4ebc-83bd-c66ea737ceee", "comment": "Malware payload (Mirai)", "value": "e0a63c34720e67c040939d49b8276832684dfada73a3d594e273ca81dda81c19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "85924b6a-fd32-4018-b1a3-12b0941de4fe", "value": "T121533A0136180D57D5E24EF06A3F2BE583FECD9220F4B1486A8FAB864671E32154AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "f547756e-ccb9-4e69-84ec-06eaf7395b59", "value": "768:uivy8uJOvVHnQh6kI+5WOTOpu5yfBKeNAismT7ny04ckarMoXZXuQXRhJn8cfPfL:dpm64IuUBDsmT7nH4NQdnb4Ho", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "4e9c4ffc-ce84-479d-96be-77697088d5bb", "value": 62108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "9c2e9d57-42b8-4707-81c4-188ed3873903", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73f741ee-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "2df26c67-8aa7-4e80-bd30-39517d03ee6e", "comment": "Malware payload (Mirai)", "value": "af682b1772aa4b0b4f571bf2b4ea59dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "57cfeb7a-2a9b-48b3-bba7-8d77958b1e12", "comment": "Malware payload (Mirai)", "value": "9926af5ec14f34ce01ce7269430ad328d866b60ce82654e3077449a3c12ce4a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "261d5e59-3c10-4f5e-a51b-af0fd60e2393", "value": "T14763290177140D87E5E20EF02A3F2BF183EEDD9225F0B249694BEB518671E72144AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "61e77ce5-b6fc-4548-92b8-373f07f47a8e", "value": "1536:gop1Gbg6MuVyKeG44+V3m+FkAG/VZKYnH4FQ6nrZH8:fGC48B6Jp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "6cac6e01-1805-4b84-a1d9-c03d849343a4", "value": 70300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "94d49053-9d37-44b9-bd6d-c0bf2621a44a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73ff04f2-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "cef0c9e3-0efc-454a-b41b-2acd3ff162e2", "comment": "Malware payload", "value": "11c60f9f8e283705e63430fe2ffade42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "08fe07d4-1595-4a35-a91a-33c08d0501f8", "comment": "Malware payload", "value": "6a6d07cff66e7b6a7ecd92f98522bd397722c7c253d12fe3d34f1067bd6288cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "f4a7d649-2a15-4936-a8b3-20d2803d6675", "value": "T13C330885BC929E6AC5C023F7BA2E578D332263E8C1CF7317DC085B5076CA90E4D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "b23a5a16-17b3-4015-8942-a07c28dde1cd", "value": "1536:ck8Yianjdbz80O0+rOiK+2SnLU7W3bSZddYuXi+12dMWbv:cQxG5pbLp3bSZddjX/od", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "d25f18b8-0956-48b6-8d81-f0b72d7c69e2", "value": 50528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "a58fe57c-a80d-4753-a6b0-40518966a263", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "4f285a3b-c27c-4c1e-8638-027287401ef3", "value": "t1eee0c600fc2a8b288ccb9e70ac9c03bce90162021422cb20df11c7e0983f428b319f", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7403537d-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "dfc964b6-20bd-4a8e-93f9-78c4b2245e4c", "comment": "Malware payload (Mirai)", "value": "224d33e3fbb634c34b845d62c954aa77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "5588a6c1-68ce-4004-a4e8-748394b8b184", "comment": "Malware payload (Mirai)", "value": "26031f3197346dc7ae2fb61f054a748fe7c5307a66374f1a0ec853e8cb12dc59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "192f5b64-17d1-49b6-bb3f-490e43487ad6", "value": "T1D2C3948A7FA03FFFE85ECC3745949B09118C491D62957FBA6A28E404B74B10E59D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "6e4217a0-ff50-497f-95ed-8c4852b9697e", "value": "1536:ShbHSxqUiSF79N9M45lB4KTD6NmQYMv1AROKbDrrOWsElY:ShHU1F79N247B4Kltq6ROJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "07e94444-ede8-4f4c-819d-7d1764f1541a", "value": 120388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "0f3c7558-3682-40d0-ba36-0167c7513219", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7405de93-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "237aae6a-f62a-4353-9ee8-33032b249428", "comment": "Malware payload (Mirai)", "value": "33a8f48fbd45a071419a7213affd014d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "ed1ed467-f2cc-44b6-9165-631a4779acae", "comment": "Malware payload (Mirai)", "value": "ea22a852eaf0b7dd3e7b0a1c7d7fcff4fe66bb6875f611aefee2a5f0b45a273d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "fa26e540-bb52-4de4-a3ff-96a79e3aa2ca", "value": "T1C9B372897FA13FFFE81ECD374294AB0A118C981D52957F7A6A38E404B64B10E59D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "af0db83c-b8cb-4ce2-9c87-fb8a936e1367", "value": "3072:2bB8eJ2RC0w4NQJYrFzguMAt8nrMjrkvB9wrVMtvAT00LKrcTw0nINLzsrI5:2bB8w2fNW9cTw0nINLzsr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "fb46340a-aae7-4cb8-95ad-65c708717335", "value": 108916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "66c1c47d-c2a6-465a-aec8-aace890db976", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7407bb23-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "a1a682b9-e7cd-4634-8ea3-fae994ea2d63", "comment": "Malware payload (Mirai)", "value": "4ddef375377e9ee7de9afee487c6b807", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "c64018dd-7691-4603-b0f5-6efa974e3b3c", "comment": "Malware payload (Mirai)", "value": "7c322f151232a0a6362bfe2b6f1b721de2e694f729d6dbb11e43c7716af07fa2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "01415ac2-b19d-41be-8b9a-f9f4e6aa332f", "value": "T18B531945F8819A06C9D413BAFB2E058C732663ACD2DF7203AE156F2173C692F4E7B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "4926d6f4-ad07-43e8-8c34-3adc4d4c6fb0", "value": "1536:Nml3S1bhGZ1tQid/PduKRmkjwwonnZIXstwFFvkRZ5:YxSeZ16iZFuKRljwwaZIDFFvkR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "cadbf4b0-a3c1-4991-8af9-d98690791a85", "value": 62636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "32301dfe-83de-4e4c-8252-65c5d51fa7bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "740b79ee-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "62399132-3c82-4a9b-9f01-9f87bb4c6434", "comment": "Malware payload", "value": "a96b1276ac4f5720b6c7149b0126ed5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "3b712f8a-76a6-4b77-83d9-b3b4fa249cf8", "comment": "Malware payload", "value": "566f710ee53edb920e97b626003d71793e2e0f0428c192b37fd253dab5a56c56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "c77e2311-3d9b-4db0-a210-b4ce91a2c060", "value": "T126132A99FC918E6AC5C023B6BA2E478D3352A3A8D6CF7307DD045B4076C990F4D7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "d17dfc5c-aeec-4b89-8287-200bf232fea6", "value": "768:/3anMhq1cEtrB4Q4dhpwm1O2yYKsubuxqbSZrJr61sPrKRYi74yRKnE:/3anMhq1cE5Bv4db1O2yl3buqbSZrFEu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "ef5b1220-6d52-4899-8be5-a6d72fc237c5", "value": 42336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "b3277617-998b-4df1-82af-9d29c75dc46e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "262deef9-6231-4e8f-be94-a029a988a037", "value": "t1eee0c600fc2a8b288ccb9e70ac9c03bce90162021422cb20df11c7e0983f428b319f", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74139bcb-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "eb08addf-ae90-4e40-977a-55e5e0d84647", "comment": "Malware payload (Mirai)", "value": "9a54af47bceab2d863d1ec9187f73966", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "d82bab5c-57c4-4f7c-b1f3-ee39952c0979", "comment": "Malware payload (Mirai)", "value": "0d27fe38fc3828a0989f7ee764de348b59b79ead49382e1001b72aafdb2ba731", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "36575b14-7fab-42b5-adf1-495cbfbb3472", "value": "T176730846B8919F66C5D023FABE2E018D33235BB8D2DB3207DD146F2077DA95E0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "de2ca158-3108-4944-a103-b1223e1cfd4d", "value": "1536:OXnPKlIDRiVN5MyaqWmd8/uWRbSZw0EY2wziv1ez9Er5LBIYIj1oO2t/v3/:62Ai+BRbSZwD9wzCYz9EVSQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "e2467dc1-0b6c-4827-80b6-dbefed7b231c", "value": 74460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "5eb60228-9cc7-4af0-b16a-0593e9767304", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "8530abd4-485b-44d1-8bbb-5780ae40c99f", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74184d4b-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "16284f18-5335-4b7b-a7fe-a5dc73f80169", "comment": "Malware payload (Mirai)", "value": "2a597a99ccc6078fe27f63d34d4535f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "e6cfb6cb-89a4-4966-b879-710d59dedbbe", "comment": "Malware payload (Mirai)", "value": "d72e0090674786faa67a43c46fd535bfbb08a0ade84ccc542ec96478d7845403", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "696cd0fe-fec6-42c9-8da2-fe9b6bfb5cdd", "value": "T1A0531A56B8418A26D5D013BAFE2E118D33236FB8E1DA32079D047F6077DAD5E0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "4dd84f83-6aeb-4ba8-8762-b9a253c7eb54", "value": "1536:f3nA8EZjpQOO60NjqSMT11xKbSZYuE53qBGYI6ZEOit/zIi:YB5tX0bSZbEF+87", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "aaa69e24-dcd9-4105-8951-4ce582db3c92", "value": 66268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "a3db866e-1e5c-46d6-84af-3944d8da1520", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "a4db80b1-e9b6-4e43-88e7-2b57454afe3b", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74219e5d-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "3af43c34-282e-4c73-a0b9-1edfbd8b5b2b", "comment": "Malware payload (Mirai)", "value": "926dc6a593417048b904eebdbfd89fed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "289e61a9-6ed9-4c71-ac87-c70114c21a05", "comment": "Malware payload (Mirai)", "value": "019dba311a35ff6a1178fc13adb29c862cadb3241b0ecb87040596f784f597e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "7c5654b5-c23e-4e66-9a2a-af3af5925bf9", "value": "T1BCB3515B6E60DB2CF79C973506F76D24834A23A72AE1D549D18FD6001E3072E6C0FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "3550bf33-ed26-4d4a-974e-370e53c00136", "value": "3072:cjvFH+/Thnjextd8Ce0mLjZBnvgrUNfTNM63MWWcF/UFb1lmWK4:cRH+/Thjo8Ce0mLjZBnvgrUAdFb1lmWB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "b13f3b4e-17d9-4695-9abe-c2bd4f0054c7", "value": 116244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "538471ac-475d-481d-9aeb-8c50c8613152", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "dbe2ac43-f1da-47c2-87c8-cac9e6fd37c5", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74216536-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "054ed5bb-24fe-4833-be0e-86099617f40c", "comment": "Malware payload (Mirai)", "value": "22d6b3eb629e9d9f11b52228c8a96aa3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "4f44897b-b960-412b-969b-8770294843a1", "comment": "Malware payload (Mirai)", "value": "28b0922d4fb53567c21e1caf0dc085ee68776f15d19176bd621df45f5078c0cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "a01268ea-3eda-44cb-9423-1fd6b1d0d855", "value": "T101734BC6F411DD7EF84AD7768C124E1CB172F1610B630E23A7ABFE6BAA25158581FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "a151d9d8-4c31-432c-b2f0-f28f7a9ec58e", "value": "1536:L4GV9e8rhB50vhXLBAogfENPKKQeuacWjcW0JcWcBu/vGIP/FsU8I99R:Ly8rhB505XLBAogTKQeuacWjcW0JcWcM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "e55642eb-7d71-4f09-90fe-7cac5b080583", "value": 77832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "ef4d9513-1a95-48e2-8fc7-4a3c30dd6956", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "742e0210-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "e3b9a0bc-9cf9-4bc5-ab46-474d85b03135", "comment": "Malware payload (Mirai)", "value": "a2ae553b89389d515b47660ec718cf5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "956e5def-f3f4-417b-a8c9-de411671d5a0", "comment": "Malware payload (Mirai)", "value": "c28ee2f2b8e72bfe7052c290d86ebbbd7efd58d54163c81565eb0985b27b667a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "0653cb1c-309f-4a7c-bc2c-a1e909187215", "value": "T154C3725A7E609F2CF79C973506FB6D24834923A72AE1D549D18FDA001E3031E6C1FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "ee7e28bc-ef97-4f67-b992-0fdaf7e94a67", "value": "3072:wQrGMMCztfFJsd6BFif4qB92KUe4SaROJIgrU257NPVvidlsk7Fb1lxWy:BrvztfFJsAmpcKUe4SaRO6grUhzFb1lJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "8be03299-e5cf-40d2-863f-cd25a1cab479", "value": 128580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "65f899f5-d1ff-46eb-a415-67519832a44f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "e043c204-2deb-4705-943a-ece94e32b1d4", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "742f83e4-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "8839a075-6d7c-4848-836d-08474c0d9b5b", "comment": "Malware payload (Mirai)", "value": "3f7628878a9824e7afd3e93672140b49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "51eb8102-a5f9-4454-a876-e925c2c6bd5e", "comment": "Malware payload (Mirai)", "value": "d54c886c0f70a071a728ccff23ad103f66b08b81e1cb4b62b8ec2de3ccc8fb4e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "04d7633a-e675-470e-9c90-d93f63df00d2", "value": "T105634AD6F406DD7DF44AEA774C134E1CB272F1610A930E27AB67FE6BAD61058181BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "8fb286fc-6187-46e3-bcd6-cbb7834933f1", "value": "1536:DD/yThEr31c/72ofnXYKaQeuacWjcW0JcWcBbvb2xX/Nx+8G9Y:CEr31cD2oNaQeuacWjcW0JcWcBbb2xbr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588673, "uuid": "f8fe75af-3802-488b-9ca8-883bc67c84a1", "value": 70552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588673, "uuid": "3738abd6-d502-4710-acfc-60b72c9c2a49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74813fd2-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "42f0d140-7d99-4dae-a591-1d81ffa89f8c", "comment": "Malware payload", "value": "81d2537e3a493b4474ede662b0f56a89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "ca76d27d-aeac-48b2-9728-4d66e693a8da", "comment": "Malware payload", "value": "bf853337ff1b83725ad8bb6ba64006397d18948243ceef36dc89971e14ad0e7a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "1bbe5682-0426-4113-9156-02e58d211ec6", "value": "T13374E086F392AF97C84F95754085C544939CEFB6F3D2C3422F9659B9386D0368F2E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "ce968a10-6cc5-4fb2-ba5f-68f0eb3dc4fb", "value": "6144:DCYxxzMwilsS9BIfhqQdqzMzxKglHBZ3ZrFsQpajP/E:DpxxMz19BiZdZKov39FsQpa7/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588674, "uuid": "22fa1416-9430-4122-a8f2-fa0e99fba2eb", "value": 369468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "31074a82-1802-425d-aa2a-8f0bf7df759c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74a8a182-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "bfca3dc7-9b36-4a6f-843b-fdcafd397390", "comment": "Malware payload (Mirai)", "value": "7150033ac67e7bd261ea443eb544365a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "d861c40c-723b-45b4-a1bd-8f85828315c8", "comment": "Malware payload (Mirai)", "value": "249900611fe56e9be5a6aa93f4cb50b9b035f19311fbe30e3921952074258bbd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "dce5835c-7625-4c15-bc89-639bcbd84225", "value": "T18E935B22663D1B27C0E0A57980F7C736B3F64F891924820EBE255F8C7B55AE035573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "474ca934-16fb-4eb5-ae1d-1ed6e7581f8e", "value": "1536:eo0wPJvYmoZicFORsQHR+c9lpaQfv1ECr/TMxkXP1ToF:t0Qvpck6c9HawvP/T8au", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588674, "uuid": "6b7b0936-16e9-4629-a3a8-ea69d00b8f43", "value": 94135, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "a96a07ee-fd43-4e30-856a-01c3443694dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588674, "uuid": "6dcc8b7f-71ff-4743-8242-b313cb243a04", "value": "t1b821b131572056156a61dd909cee57b2522d83165749eb37cf31c4cc65090edea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74fc5c47-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "49c6aff6-87df-4b0d-b7d1-0fd38efe7567", "comment": "Malware payload (Mirai)", "value": "cc6ee50436fc011d6ce0fc711739c590", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "12e5c539-a515-4e29-b5ee-7ca1b4a4e78a", "comment": "Malware payload (Mirai)", "value": "9d3414add7896b85be8ace59367a1be7ff3d547d524b50299401d10e5ddcd978", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "3bb6aa33-c614-496f-95c2-facbcac1664b", "value": "T10C631845B8D18A02C6D412FBBA2E018D333663ACD2DF3217AD156F6633CA82F1E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "b68a7330-4b5a-4ef1-8475-133b29b05a7b", "value": "1536:pDxUKWZeDFwKQzXQ0iuKRuw4Kyb4Bt3R7sL5zTZIb/G0FUv8iA:jUvuFwzzXguKRUKycth72d1Mu0FUv8i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588675, "uuid": "b61893fc-ca0b-4f9f-a316-a58b89eb7b38", "value": 70632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "bdb05b50-b496-40c3-b8bf-9bb543cc9e6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "91aa8e26-43e7-4286-a966-e0547beb0754", "value": "t1bd3190ea56e40edc77e4c354818b602d8edc35bd3b5064bbce5d5b5f82a39c2702b4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "751d6f32-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "5aea09c0-cb08-4882-ae0f-5cdb015b60e2", "comment": "Malware payload (Mirai)", "value": "ddbba8572048dae06221e30fc9c958b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "46236d86-bbf4-41b6-8cf3-bc18e75dc2c3", "comment": "Malware payload (Mirai)", "value": "2e7ce9629f6ba58d3fff1292d164daf919a203d453a97d2168c0af64544cf230", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "a4117d83-7568-4e88-9e5a-88b6891fce4b", "value": "T13BA35C226B392B27C0E4A47940FB873673F65F492960920EBE255F8C7F16AE035573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "77bfce91-2561-4070-b3d3-0dc553eb36a9", "value": "1536:hmHBwuXU0VSZYUImRBFvRFc+FIs7paQnOMQvr60FR2KpAFsnwT:ohY2UppRFlCstakOZ60FAeDwT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588675, "uuid": "b5f3aa03-1b96-4108-b332-86d2e40144b2", "value": 102705, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "f62e85bf-ff56-4a29-95f8-33183e56aa40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "121d1e7f-3b40-495f-b50e-de0abec97ed9", "value": "t18621fe325b2066256a61dd909cee97b2122d83165749eb33cf31c0cc65090eeea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7520928b-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "b5467757-05d4-472c-ae83-4e2b733468fe", "comment": "Malware payload (Mirai)", "value": "89d2011fff1535f1811d61657ea0820c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "05761311-5015-4eb0-808b-9f598027e11a", "comment": "Malware payload (Mirai)", "value": "7e05474890a7478e1623b219c73d6b1dad09cc3960c0001ed71587234c7768e9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "72d8ff99-26cd-40c8-9943-9a62ed47381e", "value": "T19D532A49E257D4F4EC060A70206BEB76D6B6D9362120EA9BE78CBD27DD72E02D0473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "9d9b6019-a38a-4e73-92ce-563cd2a55e2c", "value": "768:BD4fWkmkexEb2thXQ9MnK+jbiL5CtKY1RlgF36OvJVHbHzDMK:Bfmb2thXQ9MKYy5FmlmL7T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588675, "uuid": "78ec7ced-262a-4cf7-b999-a4498c859e9d", "value": 62040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "c563418d-ec2a-4073-91fa-8ad4a87c10c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588675, "uuid": "a0a9c232-55a4-4258-b613-ffa1a2ab6819", "value": "t13d21dafb0dbd19c9f7d5d500835f2fa0097ee137259071904271e95072a7e81907bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95251d14-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588729, "uuid": "a1de79e1-f05a-4736-bb39-0255482228ef", "comment": "Malware payload (Mirai)", "value": "a4a7c4ad686852f244b27591f611c6f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588729, "uuid": "7352eee6-ec40-49ed-b6a2-6b6e21e09d01", "comment": "Malware payload (Mirai)", "value": "438f36c1a030551dfbe32c5a8780104e72cc36cf642eebaefce52742583aa2f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588729, "uuid": "cfa1b720-7e0c-46fa-8d65-a4c509e046ae", "value": "T132332A49E253D8F4EC070970106BEB3BDAB6DE3A2170EE9BD798B9279971602D0473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588729, "uuid": "a048f04f-55c3-4727-8355-3a55cad952b6", "value": "768:3IGvGNSklCZ8o4Ryr68SJEjDsli5qw6AFL7aOVJVtHL45A:3hvQo4u6J5w6yLLR8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588729, "uuid": "357d69b6-cfab-4c47-bcae-e6a0258e0544", "value": 53848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588729, "uuid": "5f755ae9-17f3-49bd-a812-88343b913e59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588729, "uuid": "0b90648f-d869-403c-94d7-27f14f4aa284", "value": "t10c21efbe1ea718e8bbe59100c35ebbe04575d53f56a076d00772a10427b2e9124bed", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbcd3a91-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "e19641d2-d3b8-4c15-8ca5-13ac9299aec0", "comment": "Malware payload (Mirai)", "value": "6ae75fa2d21ae5eb56e090e5a2554049", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "949cd030-0fae-4389-834e-84197e621953", "comment": "Malware payload (Mirai)", "value": "f2279e7920c8270327f21b7ac2762475b7967f9bf92ecb359cb9cf551f4f7878", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "84f533e1-d12b-4b73-9f6b-0f64f9dfba28", "value": "T1ACD33B06B30C0A07D1632EF43A3F67E093EFDAC121E4F645256F9A8A91B1E365585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "7b21d8dc-ba57-46fc-892c-6f93a1d515e5", "value": "1536:O+65RMfLd4/IbIDRgicUwK9xpNvTxNfjbo8PgUF7MJqvAfItK510LHqQe2khhyzA:Odcd4dRYUB9xr7x17ga7MdfrhhQfo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "89628e38-0467-4090-920f-64396ec86eed", "value": 136952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "b4b63e52-49c4-449e-8bd2-02615fd669ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbcdc4c9-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "216c40e7-733a-481c-9324-0744c53e6c9c", "comment": "Malware payload (Mirai)", "value": "ebc18654030452cb955e2cc26a30630f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "afe7e7ae-c371-40eb-a590-ce6f32bfb915", "comment": "Malware payload (Mirai)", "value": "2dc6f49b24098e7c8dffc88a6d621988e6ba41b1f70086ce1b24409df6e4e7b0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "c725966c-5af3-4265-a216-d3fdb2f7a6be", "value": "T1E904E816AB510FBBDCAFDD3702E90B1139CCA44722A93B363674D528F54B54B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "7ad8aae6-0626-45c9-9898-6a4e21dbcc4b", "value": "3072:Mwoe3s5TZt9nQiX/GpO1SMRpp6NWJdWQli:MnSsBZDQiX/2ObRWoDWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "6b65b0ae-5273-45da-afd2-1d06b3452b46", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "9241e77f-4391-4f05-8f84-f0e370e2ea8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbd31350-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "066fd0b3-daba-4132-a728-f863e22ed87c", "comment": "Malware payload", "value": "3564d3cd31e88c94e3bca9a88e4bcdb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "c67b31a9-44c0-4da6-843b-124995ba8948", "comment": "Malware payload", "value": "92992fd85bcb3335ebd0ccec348b82f851f7d627ebfe5685a79862ca93e596ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "cdc01c48-9dcc-4cfd-a355-b1988f4f3bd1", "value": "T11B41C9C4335344BABF75EE6ABAFD0914718265A29CE4AB07DCFC78EC814CE0C24486", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "b86a0e40-dcb2-490c-9bba-4b555ca34976", "value": "24:vvq1vT/5vhT2hkaBvM2kvp9vj2lvP1vz/vEBv1hE:vEt9kJkn4Vb+c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "73557680-bac8-4355-b392-a2a4e2e6c8b8", "value": 2023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "795a8eef-1a87-4c78-aa20-2d922b775f65", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbd42f32-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "3fa6ee5c-80dd-4587-a442-30f80dbabcc2", "comment": "Malware payload (Gafgyt)", "value": "9ae3fd1b603019c32460277f70ee0296", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "083c5b48-2e67-4079-92c8-d7bdcdfa1bdc", "comment": "Malware payload (Gafgyt)", "value": "18ed27e4e10117ea3e8821e198294c1685933fdf1cbbfe0af400b1a6d5726a0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "f9db6007-05c1-46e6-9271-858e9ce26da9", "value": "T164C37C76DC2A5F68C695D1B0B0B08F792F63B59042875FBA19B7C2B54083C8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "0ddfe1d2-8ce3-4205-a4ae-3469cc46f570", "value": "1536:za60wP/HOD9Z2llaDc+CD8KfnH31nMgMUt7mKWP1ZDoZyuyza:z/P/oKec+Kjf9MgJUKWtZDLuQa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "d5a2f720-0718-4f86-9dda-5f153c90cac2", "value": 120832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "f00c3fdc-5d04-43b8-b960-513244c3c67e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbda6ced-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "720df0c1-61a9-474a-914a-508881b7ba0b", "comment": "Malware payload (Mirai)", "value": "995a5751a2c50a2cd172b13a5247a5f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "f3ca4bd3-d338-4e56-85c6-baa058dd638b", "comment": "Malware payload (Mirai)", "value": "8413fa7a379fc68cbc54c833a94842fa0467714f1b5846acbde39d294f0b030b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "d250918b-8939-45c1-b36f-33ee159ae373", "value": "T185E33AC7F800DEFEF80AE33648570905B630B7E205925A372257797BED3A1991937E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "c72870a5-8e1d-4566-af45-f089a70ff5f5", "value": "3072:LcyAggG6CLZaOwozAW1dYVaVrjbiNLmzVrXyXHisG:LcypbwQASYV3LmztyXCsG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "23453aea-6252-4da4-a29c-58a99ba1c110", "value": 154592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "853aa5bb-e2c8-493b-8fbf-e820e1820946", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbdba24e-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "4d7a2af5-40e2-4677-b371-e8035c0140dc", "comment": "Malware payload", "value": "027e1608c008166bcb5f765f5e8ec2e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "c93995b9-a8f4-4da6-87d2-4ae0eda6e9e6", "comment": "Malware payload", "value": "d5f0647096cb2ffae6845a2586f190022c41d6ff4f9f1bd6421b4e2b2cd860a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "16415c73-b075-4847-be2b-8a72ac9af4bf", "value": "T15304E816AB510FBBDCABDD3702E90B1139CCA44722A93B363674D528F54B54B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "e25c4bdb-efc5-4f1b-8990-ef30177d85f7", "value": "3072:swoe3s5UZ99nQiX/kepewc8ZpqNGmdWQ+S:snSsWZzQiX/kueb824CW5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "123ddb49-2477-4c13-83c2-2c57c06095ce", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "421969f3-c053-459f-9169-b622413ee1bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbe6691b-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "2ac346ee-2c7c-4bbf-913f-5a34633489a4", "comment": "Malware payload (Gafgyt)", "value": "dcf4d9e2c6acda0d54190153e5140cbd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "bca0c431-1f6e-4ee2-9406-fde2814b04be", "comment": "Malware payload (Gafgyt)", "value": "8a2e6b6327836175974f0ff0c9479cade577d32383382c3fe4d9b6ccaffffe59", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "e74a19ae-8221-4fda-a5c0-7804489288b0", "value": "T1EAC37C76DC2A5F68C695D1B0B0B08F792F63B59042875FBA19B7C2B54083C8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "8c6630d3-d41c-48a2-9584-b77918b9b124", "value": "1536:Da60wP/HOD9ZetqaDc+CD0K/nHflnMgEsNqmKW/FRDIhbeyzJ:D/P/oqfc+K7/VMgJjKWNRDaeQJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "95da8538-1903-4077-ab85-bc580c8d141b", "value": 120832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "df7d10a0-8971-4d20-8cbf-16052b2b5fbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbeabe40-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719588847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "426fc3fc-d577-42ec-8351-377eb2ce07f5", "comment": "Malware payload", "value": "8e5eb082b4a6d4bfb70db3936241b92d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "082e159c-efd7-46f3-bcd6-999bd7f92ba5", "comment": "Malware payload", "value": "3f25eff5ec9295c581405ee693a167bdb0c3a7877725c7c2c1cab905e6591572", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "09cdd2cc-e614-4143-b9b2-be4922473982", "value": "T1723318C5B841AE29C7C057B7EF9F158E33009798E1DAB353CD148BA476CA84E0E27B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "2d26578c-9ac8-46f0-8338-a8f037dad60e", "value": "1536:Eu0pKnrjjielxCRVgCMlsEuvy94juiciWnx4/16hYh2rpGR1U9:x0Yj8HXFvy94juiciWnx4/16hYcQRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588847, "uuid": "a5705379-9fb6-488b-a1d1-8ff9d8c287a6", "value": 54608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "42a4a582-f815-4039-8e98-f5e2189823f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588847, "uuid": "bb138bb8-e145-4aa5-901e-933adef32969", "value": "t150e02610ec668b1848db9a74ad9c07b8e901621265568720df11d6e4983f458f319f", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc0c0242-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588848, "uuid": "219925c0-ee65-48a3-be4e-88e247276946", "comment": "Malware payload (Mirai)", "value": "6397c72364faacbfb4e24d2931ab6eb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588848, "uuid": "01666191-43cc-446a-bc9e-aea1665b99e1", "comment": "Malware payload (Mirai)", "value": "f544b817cb0d8cdb08e9290ba80b337381f92572dc8f1dc27c952f042d780826", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588848, "uuid": "8b39b00e-4495-4cef-b93a-2f99d742a5b1", "value": "T130D34B06B30C0A07D1632EF43A3F67E093EFEAC121E4F645255F9A8A91B1E365585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588848, "uuid": "2f6f0d26-7292-4734-9323-d5df6063de50", "value": "1536:G+65RMfLl4/IbIjEgqcUwK9xpNvTxN/rzQX0wgEF7MhavAfIaKZ10bHqoeOkJNyV:Gdcl4dEwUB9xr7x9EgK7MVfOJNQ8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588848, "uuid": "6d72755d-f36f-4644-bc37-abd4f59af320", "value": 136952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588848, "uuid": "3a5837b4-c4ab-4df6-86e6-3aa81cba5d04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd4b2f06-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "e2f749c4-ff52-4b81-ae3f-5fc825401436", "comment": "Malware payload (Mirai)", "value": "24d4c84a26069aac99eaefb09bda78bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "06b6d2e6-2bae-4772-8491-0d29264e8720", "comment": "Malware payload (Mirai)", "value": "44fb69549eef1bcb096585646db8a28ef9c60fa274529dcc9b10f91cc9353ffe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "57bd0d5b-e3b0-453f-9e87-1a80339fa95f", "value": "T1D6E31B56F9818B12D5C111BAFE1E128E37131B78E3DE72129D246F747B8A87B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "4371dad6-184b-4699-9ebd-680d2a24e30d", "value": "3072:QRpOoeOU6ia7eXGOokYwaF+Z7TZ5C1tkiY6T:QRQoeOpVeXpok9aQn4tkiYO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588850, "uuid": "1663b93b-7287-47e0-aeff-1b87c75d7c71", "value": 148092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "e8d193ef-e068-48f5-b5ce-7525a7675398", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "a7ba4d19-94b2-4802-b2cf-69aa479e6a76", "value": "t102016852cf670a4c97c3c31091ec9223b4b27566152039c2476d2ecc15503f3ba2c4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd730864-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "bd5ab495-12f6-497e-a7ac-675ba6b81bbd", "comment": "Malware payload (Mirai)", "value": "6878b2dbfa8bafa194b33e0b1d45bf2a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "b931e969-b449-422d-b5ad-b1b7c23171b6", "comment": "Malware payload (Mirai)", "value": "d0610e4d40b2e0f44d89c781e21a405ad451a15f6ce42a5219c317e04bf24e31", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "6e809150-dcff-4455-a478-e4b0b63d5ecc", "value": "T1D3E31B56F8818F12D5C111BAFE1E128E37131B78E2DE72129D246F747B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "3bc81012-df4f-437d-b32f-73466f10aade", "value": "3072:ARpOoGJUKySLmXu2gMYRacVRjTh4CddDCY6E:ARQoGJ59mXpgMMauaAdDCYZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588850, "uuid": "22f8b43d-310a-4c6b-b4e3-0210af968d53", "value": 148092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "138f02cc-38cc-45b0-8df2-42c5715b7691", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "b1f44334-4588-4ea0-9b7f-a33f3f90153c", "value": "t102016852cf670a4c97c3c31091ec9223b4b27566152039c2476d2ecc15503f3ba2c4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7ee628-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "d0499428-8560-45c8-ba36-5eae070d2305", "comment": "Malware payload (Mirai)", "value": "3189626ae6ffe72b28d734b4a9312b00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "bb832c27-01da-447e-ae1f-a1ec6426f359", "comment": "Malware payload (Mirai)", "value": "617f61393e6bdcbb601fda4eff69ee0287584274e97b74d13a634a857eef7ce0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "dd3e5bef-6c79-4a4e-a063-f81678cca017", "value": "T130D30945FC405F23C6D612BBFB5E428D3B2917E8D3EE720399216F21379685B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "2b4fccd3-5fb5-4673-b391-6840905c6c39", "value": "1536:zP8g2CSJG5mIOd34M1AL0Y1jAFrZ4V/3ETVORjbaiMtjpChMDzlkHwywVFN+a415:z0FGo1MV1jI45ERORjbCZpCKnXQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588850, "uuid": "46d9ae99-a36b-4ac5-a703-7c4dc10f209a", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "469c86dd-8456-4a65-bc9b-f768746fceed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "d44a2ea5-6edc-4745-8ee7-dd914e3fec6e", "value": "t18b119baa8f981edc97f1ccc6c68f70293fa5714afb1620238a565f4fc5635c1b22b8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd8d1cd2-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "9edbe593-7d65-4165-884f-7c7d9ff42afa", "comment": "Malware payload (Mirai)", "value": "8f8b34dc2d86f9ef6801b55797b26cfd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "75d80961-7a0d-44bd-8bb1-5a16662b2e29", "comment": "Malware payload (Mirai)", "value": "f22ae08ebc4160acc47eaff852959f25c5da8ee4defe4c0db5842769eb3c7a4a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "011672e4-7170-4d32-9c24-091219775b60", "value": "T179D31945F8404F23C6D612B7FB5E428D7B2A17E8D3EE72039D216F60378695B0E3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "1f3c080a-b064-429b-bf8c-1fa72a6c534a", "value": "1536:LeIIcq87ZO8VQzlHaiTUAQjXlFFAeSz4VAZJsTgVsU8BD+2/oXd7lOrMwywmFfbz:6IIifYTUHjVFFM4UiMVsU8XAXGRqvQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588850, "uuid": "238694d4-9422-4a31-95f5-3952c069b0e5", "value": 137984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "9126029c-3c8b-4640-bfec-4b2c8434ac4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "b57ecae3-34e4-464d-adf7-0ab54a5b278e", "value": "t1781102bc4f5c4d8c97d0dc85c28e63223a7976b9fd2a2813886a9f19c1538e174374", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddaa64a4-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "37273943-b746-4fce-9c5c-17a2e32ca64b", "comment": "Malware payload (Mirai)", "value": "225ed2c223454bf7986895aefdaaf476", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "241d56e5-fdb1-4119-8baa-af1f8e1dac08", "comment": "Malware payload (Mirai)", "value": "d9c54ca55569adb387520bd3794321ad2a9fdec559e78b706e7bf0d18018478a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "052c6f58-8b76-40d5-ad83-4b429f656394", "value": "T1B6D30945F8414F23C6D612BBFB5E428D7B2A17E8D3EE72039D216F60378695B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "d6e78343-dfbe-41bd-a4b3-c9c77016f2a0", "value": "1536:reIIcq87ZO8VQzlHaurUALXlFFAeSz4VAZJsTgVUs/Br22/I/dLl2zUwywmFfbBG:aIIifMrUgVFFM4UiMVUs/Hg/GxyvQl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588850, "uuid": "3ffd6759-35a8-4f0b-ab09-5c297818681b", "value": 137984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "236bffe9-4742-479d-96c4-62369597a2e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588850, "uuid": "443481b3-2e0b-4a05-b660-dce5db3254ba", "value": "t1f51102bc4f5c4d8c97d0dc85c28e62223a7976b9fd2a2813886a9f09c1538e174374", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de0fe4a9-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588851, "uuid": "c619e92a-8f07-437f-ab90-773718a46dd5", "comment": "Malware payload (Mirai)", "value": "08fecfe15e52a3e312e84ad40550dc65", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588851, "uuid": "8a918546-ff25-4150-b4fb-f9c001e85ff2", "comment": "Malware payload (Mirai)", "value": "1b7c34d5e710f4457d997dafcd6aebd13e7c9127bfba64784ab82038f6dba06e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588851, "uuid": "c6b19e0d-9e87-408c-acfe-b84054e472c8", "value": "T174D30845FC405F23C6D612BBFB5E428D3B2917E8D3EE720399256F21379A85B0D36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588851, "uuid": "674dff90-35f1-4e8d-95b9-fc7aaddccd54", "value": "1536:zP8g2CSJG5mIOd34g1Ag0Y1jAFrZ4V/3ETVO5bTa6MFjpChUDDl0+wywVFN+S4d5:z0FGE1TV1jI45ERO5bTKhpCyevQq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588851, "uuid": "1f53547a-bbd9-4091-a95f-879ba31bf074", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588851, "uuid": "a3f13c5e-54a2-4c3a-b48f-a8b88e436384", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588851, "uuid": "99a97f2f-eb6d-4194-a473-11e3d40571c1", "value": "t1f8119baa4f981edc97f1ccc6c68f70293fa5714afb1620238a564b4fc5635c1b22b8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deb2c621-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719588852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588852, "uuid": "5d9af21f-8e41-4f0e-937e-219929115b3a", "comment": "Malware payload (Gafgyt)", "value": "e8b3369259d5365db3bbee40f60889f5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588852, "uuid": "272075ff-bb22-4562-8c8f-b5ddc946e672", "comment": "Malware payload (Gafgyt)", "value": "afb865a0a50a1f5e36baaf19c23d5ef9b0ee5e9fea72f19d384048095588bdf7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "cca73b70-fe58-41ae-a6a5-cd6deef7fa14", "value": "T1AD043A45EA414B13C0D72BB9F6DF42453323A7A497EB73069528AFF43F8279A4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "0f6ffba6-ce17-40da-9b85-39ecc6dde961", "value": "3072:xESFFNxSClK1Tvk3ahn4qfdQGGgQzWo6Li/YpEoGM/RxMQkunSh:SSHNplKBM3ahn4qFQ/KoWi/yJGM/RxMf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588852, "uuid": "8deb8887-77e4-46e3-a7a0-7de15717641b", "value": 184862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "aa5757f4-7b52-4ca3-bbe5-734b9a07ccc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "4499e94d-f33e-4e44-9db5-44609030ada0", "value": "t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dec30481-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1719588852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588852, "uuid": "21db9e6e-0afe-4edb-8e73-abb047fbf9ad", "comment": "Malware payload (Gafgyt)", "value": "da360336f0fb5ac045f0fa4afba8f672", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588852, "uuid": "5e9bc424-7537-4d11-94c2-45019247b3ea", "comment": "Malware payload (Gafgyt)", "value": "8d947beed683b391818e64da6f8ed3b014e3961060fa66c864dd221a139ee21e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "6e1250b2-4f62-4df3-8dde-1d26b73e05f7", "value": "T16C042A45EA404B13C0D72BB9F6DF42453323A7A497EB73069528AFF43F8679E4E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "e28730a3-94c7-4bee-89a9-cf1b2b54a5b8", "value": "3072:5UStdNcSa1y9YHkVaR/QqXFgsOIY7mo6Uh/YpEoGM/R1QM7XlR:qSnNm1y6EVaR/Qq1gZyoJh/yJGM/R1QK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588852, "uuid": "8912a26f-fd80-428f-9a80-a218f24409b9", "value": 184870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "373bf72a-f16c-4d4b-9f24-2273ffbdc1df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588852, "uuid": "124a82ab-cab4-4554-859c-d24b49e6e553", "value": "t1bc3111b19679512a59a1ec68edde5bb2511a96172340fe33ee21c0cc380a44fe52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deff783c-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "8b52749e-f016-47f6-8614-ae99d72405ee", "comment": "Malware payload (Mirai)", "value": "92263ccab3be9493847b5c5a7b419c55", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "89a989bc-3a87-4290-af53-c89646d097b9", "comment": "Malware payload (Mirai)", "value": "9ff9c7ebe1825c935304c7536f1a5a3876d97c4e37f667f7d420551a8392f4c5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "7fc1234a-5464-4667-b32c-14163690bd04", "value": "T1CE936BC4F643E5F1EC8709B16137EB374B32F0BA111AEA43C7699972DCA2541DA06B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "eaa337ad-0b82-4fc4-8631-fdadb15ef9b3", "value": "1536:oFd1IRgCXUzx7t0fM6lMgQEiyhcg+7ju72wPZnWhZS5xtY+t:oFdmR9XUzxh0fMQMgQEimEjLAdew5bt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588853, "uuid": "a057c2b5-1216-43a8-99f6-0275c4d1e2e3", "value": 93768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "88a2f498-fb28-44db-b67f-49b7c39c9e47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "d899efac-3a5b-4923-9012-debfeba1b463", "value": "t1675123fb5d7e08ecf3d05844c36e0fd2255adb7b146076b245a368a523e7d8150bac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df0c8176-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "36085403-0bb6-443b-933d-066f9b0efac6", "comment": "Malware payload (Mirai)", "value": "05c1fdb6e8957339b24d6331b9bebb7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "1a7f4fe9-5a82-4e5f-b079-188c13a2eeca", "comment": "Malware payload (Mirai)", "value": "42954af40696a1b198a34708bd5704822e0e6a50dd6e558628394b0770aefbaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "a8356387-2410-4f6b-9798-55d1396f1b1b", "value": "T1F8937CC4F643D5F1EC8709716137EB374B32F0BA611AEA42C7699936EC92501EA07B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "6dc7f0a6-cb7c-4333-b022-14c35061b6f1", "value": "1536:SF9VIxgC3UTx7N0fss/lh/pEupX8gWzG27WgaB2B1SJtYtg:SF9Gx93UTxB0fsUlh/pEcUGzgie88g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588853, "uuid": "0b4d5227-a941-4ef8-9262-c742757b17c9", "value": 93800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "626f3f2a-5635-4b66-a7de-7f597b5ea899", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "c1221e2c-aedf-4ddf-9e4f-09ea55c5f911", "value": "t1675123fb5d7e08ecf3d05844c36e0fd2255adb7b146076b245a368a523e7d8150bac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df410e7f-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "d78e8e64-fad3-4554-ae7d-b7aedca918c8", "comment": "Malware payload (Mirai)", "value": "8636b975d5d06fcaf4232878ae560eac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "5b7fab94-aa64-49a7-a167-61189546dd7e", "comment": "Malware payload (Mirai)", "value": "941269e0feba32829524e5ccaf5fb586a26969fd42ec5f965028c15a9ece51a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "6607a5ea-26ce-4e2b-a03b-014586752a21", "value": "T129E34A07B4C184FDC4DAC1B44B9FF53AED32B0AD1238B16B27D4AA222E59E215F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "f013dcc2-93f0-4823-8ded-01b55cc47f75", "value": "3072:mTUTfCdO6FFto6b6EwKhc/t/ekNaogMewcgsK027uWOlx:mTUTfCdO6FFto6UwwQdbx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588853, "uuid": "0e4f2413-db26-47c8-a51f-295d28862e53", "value": 143832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "de52ed36-79b3-4f9a-9617-7dbfbdc0d19e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "68e6ce8a-f510-47a5-9082-42ff4fe6789b", "value": "t1785132b438253994b2fbba3ab30af991ac71095419e131d1dd73b8e2de167c40e728", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df49ae38-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "387f495b-c524-412f-a90f-74cfda175194", "comment": "Malware payload (Mirai)", "value": "a10fb719bb03c0fc54c7d7f7b3df82a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "065a8381-37c7-433b-8ac0-5c61d1b82bce", "comment": "Malware payload (Mirai)", "value": "7e5b75f23b4280a8b84c1f76bacf9fb4a162af6f8900095f8ced16927952ff56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "0935891b-1d3c-431d-a5d7-4472ca933f73", "value": "T1D804985E6E128F7DF668873447B78E25976833DA27E1D680D2ACC1101E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "f63ad513-6925-4aaa-892f-c93d653bb118", "value": "3072:f6uSXvJnzjP0jCbzpyi579Yty5GtYunNX6qOn5QghaMB:f6uSXvJnvP0ObzYiEAUnAqg5rha6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588853, "uuid": "41773a83-8c03-4296-9d36-56f00fdfce10", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "e22f6115-b6fb-43d9-a07c-5afb83d59da2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "b8351741-7b2d-4d23-a43b-fa6b4ebed0ce", "value": "t1e441b2181e7817f097355c5e099cfb76d6a330db7e162c338e61e86ae768a838d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df4ac8f7-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "c29ac811-1caa-4c23-801f-aed8c44efb6c", "comment": "Malware payload (Mirai)", "value": "ad13ef4ee61f632c51e1f68be3548025", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "06254f50-4e40-4e51-8c3c-c1e0f03dd1ef", "comment": "Malware payload (Mirai)", "value": "1ca3b9035c657243799d16aaeb8a13268ed057528b11627ef05f4f94e00be3cb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "d0698a7d-579f-4cae-9ec9-1a9c754b618d", "value": "T16804985E6E128F7DF668873447B78E25976833DA27E1D680D2ACC1101E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "43fc494c-e14c-40f8-a015-0d135d450472", "value": "3072:f6uSXvJnzjP0jCYzpyi579Yxy52tIen9A6qewZQXhaMh:f6uSXvJnvP0OYzYigAEnfqnZchaa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588853, "uuid": "d021675d-5ce6-4f20-bac8-1ed6a0f264ea", "value": 181968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "c7ee6b48-24b4-45cc-923e-f47a0f0e4211", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588853, "uuid": "936cdcc1-f702-4da3-bdcb-b329b55b1d28", "value": "t1e441b2181e7817f097355c5e099cfb76d6a330db7e162c338e61e86ae768a838d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f70f40-3564-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719588910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588910, "uuid": "3b29bdbf-f832-4e48-b4de-3174b624ae71", "comment": "Malware payload (Mirai)", "value": "6e8a91bcec714cb2d45c876091ad0a4f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588910, "uuid": "38f2a89e-5d3b-43a4-a7e5-992601c4f9ac", "comment": "Malware payload (Mirai)", "value": "b5307a267c21dda20086d0c38a02e77f21e7c25be56135ead64d6b11d0e729c6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588910, "uuid": "94606776-e069-48ee-8584-2674e39e48bc", "value": "T168E33AC7F800DEFEF80AE33648570905B630B7E105925A372297797BED3A1991937E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588910, "uuid": "f01017d6-f0af-4d36-b66f-be8261c8a471", "value": "3072:DcyYZgG6CLR72QYzA6NdYNSVrjbilLmj9z/yvvite:DcyAyQgAeYN3LmjVyv6te", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719588910, "uuid": "d3b687f8-1820-4d1b-9267-f6bbf5ed97a4", "value": 154592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588910, "uuid": "d5caeeb4-22fa-4c9f-9444-8536209572f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d09b0f49-3566-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590117, "uuid": "c84a11dc-058e-486e-ad30-20580e736f08", "comment": "Malware payload", "value": "b10cfcbcba0e47c2453116adfe35e3cf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590117, "uuid": "e91a5b9a-d342-49c1-b188-51ccc4cfa7cc", "comment": "Malware payload", "value": "c86a30a662948031935a486b4dfc8688f669b5eddc167df9b84c099a2bc9c2cd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590117, "uuid": "9b38e072-e97d-4516-a982-1a2b6f0fe295", "value": "T1AAB5339B8953CCE4D10CA67761B79E98B7F0F091C0A1B65ACA07D11FBD2338BBC54A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590117, "uuid": "75490b75-671d-463f-b590-467f34989287", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590117, "uuid": "0638bea1-8164-4a7f-882b-5664f7f1cf63", "value": "49152:9oG0M3eb3XojbYrSmY4Z7jT64NrYBX0q9F4YmJkhJ:WI3ooQrBZ7jG4pgPys", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590117, "uuid": "f7341a9e-bf2a-4985-8963-5d84544646c8", "value": 2422272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590117, "uuid": "9cf1ddac-b45c-4904-9ece-c399ae819c8e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d78acc30-3567-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719590558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590558, "uuid": "f790cdb0-2876-4856-89e2-c4d893b66e91", "comment": "Malware payload", "value": "e2de3ad7601e5370da34efa79c574892", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590558, "uuid": "2a701e3e-fef2-4db8-a4a9-2accb37eac55", "comment": "Malware payload", "value": "b4e5ea171623572580bb410b04808790db808e3faac36b4da44bfb86daeb3502", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590558, "uuid": "c7201146-f464-4138-917f-8b2dd5ae2723", "value": "T1309533094D6A2979D794737609B3A2D530BD05E04A6BCE3CB19CE5BCFD933788EE68", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590558, "uuid": "1d6fdf53-1360-4079-ac0b-71b834174a64", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590558, "uuid": "c0cfdfd7-0831-4098-91a3-3fe8dcf5c38d", "value": "49152:YsM6dHY5O/Wu52bxX92OiWO7a0oS9OESiW49yi9Yc:Ys3dHB/l5wxX9dSagMESidYc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590558, "uuid": "19d7fc69-136b-4ca1-82d6-011dbf862d27", "value": 1936384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590558, "uuid": "b54951b6-86c4-4294-9cbb-51b0665acaaf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92a6a38a-3568-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719590872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590872, "uuid": "6de914f1-58f9-40bc-bf91-abcfb5c8719c", "comment": "Malware payload (GCleaner)", "value": "be8e4c8a7bba1862575d91235658d40f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590872, "uuid": "c65ebd46-2301-4b86-be40-fb246a60abc4", "comment": "Malware payload (GCleaner)", "value": "be2cd7dcac32146a10bbca0a783e975ace9d93ffc3bd712a2ba6893341433e22", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590872, "uuid": "a51cb91f-efd7-4713-b71f-de7bbc4348e6", "value": "T195742712A6E2F825E3A387307F3996DC2B6F79E36D718ACE11501D5B09316A9C9437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590872, "uuid": "f6bb8461-1c3d-4b1e-b695-00655c5b8431", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590872, "uuid": "f9d95553-12c8-4ba5-94cf-a5b499b06d16", "value": "6144:hALUPiywAWnJ/lPsMF5qGXnI+Kir3b1zXmSQL:mwPVqNeGXnIErp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719590872, "uuid": "72e23dbe-31c0-49ed-915f-5af46fcae32b", "value": 340480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719590872, "uuid": "2cf7bd20-3372-4208-82ce-ddc817accb02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3e15dea-356b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719592243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592243, "uuid": "b475fa9b-73be-48b2-9f89-1f624f7e02aa", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "e93d6a8f20d00c727787b77db4230a34", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592243, "uuid": "14e99cd1-82fa-4e14-931c-99ae17fb2902", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "f3d33afaedcdf50ba313cb417dfdadc406b87ca6e8264455a0d08966bdc0fd73", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592243, "uuid": "dc1d365a-9632-4f56-95b9-1dcc2e6eaa66", "value": "T187D4CE93A9E3F921E3A347303F3996D87B6F79D22D758A4E11509D1E09336A8C9437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592243, "uuid": "7387fd04-5db6-48b5-9808-444ab0864658", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592243, "uuid": "de081e10-507a-4ef9-9bab-77e994c5f767", "value": "6144:ZgLoaO4knO92EP9ZwP6syZC6pE8wNtgsHkOHdm/aiFU+qbWp0KRGgseHw1JJa5w5:uUaOrO92wZwP6L0tZHVcydTtfQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719592243, "uuid": "603a47fb-c8bb-44b1-803e-c7c70d630119", "value": 623104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592243, "uuid": "a2bdd0d8-3041-4247-b040-62e9836c4ff4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d308808-356c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719592500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592500, "uuid": "a982241f-c7a5-4b75-9805-9c172af9ad32", "comment": "Malware payload", "value": "e403eb8ed10c616fd2297c374a80a499", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592500, "uuid": "7d9ea852-1bb2-444b-a2f1-5432326de040", "comment": "Malware payload", "value": "13921e8b320fe040fad5650f692bc5761d800fc994c91f0fb0be88ffa198e567", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592500, "uuid": "6151624d-56cf-4d1f-90c6-e8b295aa04b4", "value": "T18D159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592500, "uuid": "56db24c1-8b8e-4c49-b83f-6672662937e6", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592500, "uuid": "fd206710-c436-42ff-8de4-76fbf29e1780", "value": "12288:LqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TJ:LqDEvCTbMWu7rQYlBQcBiT6rprG8aAJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719592500, "uuid": "22f750e9-d2a5-4cf0-851e-784854ac70bd", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592500, "uuid": "4b01a7a7-0380-40cd-83c6-f89b69f8de28", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7b7bd02-356e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1719593511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593511, "uuid": "78cb502b-d8a6-4356-8c50-2b1aceb946f2", "comment": "Malware payload (Stealc)", "value": "362aadbd9dc628c321bc33892046b8c1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593511, "uuid": "433a9af9-a9a3-4511-bdc2-8b7a8dc78a6e", "comment": "Malware payload (Stealc)", "value": "11f5b01983cd221e28aa672906d313ca45dc0ed41f351602779590576104c52e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719593511, "uuid": "4b19122d-3dea-4d7a-bb95-02300033eac1", "value": "T16FB5332E6487273AD05661FCC9F78EBD746BE714E7FEA270F065802E062EC047E452", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719593511, "uuid": "28cba612-4bf6-42f8-bc50-10de0556ff4c", "value": "001806c33a6e9fe5fbff34bdbd79b591", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719593511, "uuid": "ffce5817-7e16-4db9-a127-1809412a3f7b", "value": "49152:Cy78p6FyspLM6JZID0V1/VvzkUrJyORGcR5cD/96lehH8kRyMx:x78k/pLV7IozClcPY/wsZ1Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719593511, "uuid": "744d18fb-dc8b-416d-9fba-f4f11072d8cc", "value": 2452992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719593511, "uuid": "60a73326-2921-46a6-af46-c9b7196bc528", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23252081-3570-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594121, "uuid": "32a9387e-cbe2-4f7b-ac58-7096694d6f90", "comment": "Malware payload", "value": "11d26d287c6b0ca663e2d36c44b485e6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594121, "uuid": "4aa9f8e8-b76d-42b7-8241-9a139bf6dc23", "comment": "Malware payload", "value": "857daf5f0b8b43191ad46d1e7e39a807bf8265a070c7541519e472c246d0be07", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594121, "uuid": "50b77560-76e0-4994-9406-105639a83c0a", "value": "T17C54D513A5E3F816F3A387307F3892D86B6F7AD32DE24A5E11505D1A09316A8E9477", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594121, "uuid": "e805a6bb-6c29-4dde-8904-388e93cd18ca", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594121, "uuid": "6841f4fe-b853-44ad-9cb9-fe6f5978f325", "value": "3072:wRM+MLQXqu51dquxfsqZMliYEs1vRoVPOKU5pge/qaO2bhATlTzXmSFqNsyKHm:mzMLQX4qZMlidCvRM9bQ4zXmSQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594121, "uuid": "b8ae8910-1e9f-4729-aac9-76cecab4eaad", "value": 283136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594121, "uuid": "0b377cf0-55ac-4eb7-bdd1-fac2abcfdb53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a588772a-3570-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594340, "uuid": "3f584b76-e33a-4976-b0d7-949b2443e005", "comment": "Malware payload", "value": "ce5a8b48fcdb9cdbe4335aff7aaa484a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594340, "uuid": "5a27d1bf-28c9-4566-82d9-ca10e0fec35d", "comment": "Malware payload", "value": "3d3b176155a2279230a8f1625245c208483febe9a324fdda1576b09d395a9efb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594340, "uuid": "3a7bdb0b-dca6-4289-a9a5-737a41bbb80f", "value": "T106159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594340, "uuid": "a8b02b8b-9483-44dc-8932-9c111f74ae8d", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594340, "uuid": "0b794814-a685-4ccb-bc45-b01d024a8744", "value": "12288:cqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T1:cqDEvCTbMWu7rQYlBQcBiT6rprG8aA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594340, "uuid": "b7b7fb10-7796-43e1-801a-8c57a363bea2", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594340, "uuid": "d0b7f0ce-94c0-4c86-8714-ac7c494aa051", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "758aff9b-3571-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719594689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594689, "uuid": "27e68fa5-cbca-460e-af45-9ac5777eb66b", "comment": "Malware payload", "value": "7ce53913d2e8c575a1796462ec4a9fc6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594689, "uuid": "303284d7-4290-4076-b44f-31c49b92addc", "comment": "Malware payload", "value": "2d8ec6071dbfd380cf8c7e212352efa2a425ed9ecc910bb48af03a0674562cc3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594689, "uuid": "4cecc89f-ee20-49e9-9cad-53b466908b68", "value": "T166B79F03B7E218AAC1A7D630866F5642BB31F8124534AE77304C97742FA7EB01B7DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594689, "uuid": "41e6b5b1-150a-45dc-ad17-8ea62b0897d8", "value": "786432:jJfELopSzT2J4I7YkwDIv+ptzL4dCrY1y0P71F:jtp8Iv+ptzL4dUniD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719594689, "uuid": "940ffcee-ce4c-40b0-b08d-2fda1a8fb1e4", "value": 49814721, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594689, "uuid": "a78ccc76-ee1a-4408-9046-86d65fe2c154", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594689, "uuid": "5746c5b8-c4fb-4177-ab8e-c87fe3b616db", "value": "t13004fad2582dce4bcc216a69fdfd77264eca068b7b50ee91afe4c01c5f40c8d62a64", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bead26a-3573-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719595424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595424, "uuid": "59bae583-d249-4dc9-82cb-1fb8d374049f", "comment": "Malware payload", "value": "97c205ca4dae64cb112ef39e49ed5841", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595424, "uuid": "4998faa3-b3f8-44ee-8c23-d1ef2921c51b", "comment": "Malware payload", "value": "6dd3fbbfe2f65f1f384572fbac1d39f2da461548526ffebbb35ebc0298d9045f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595424, "uuid": "ac8c1eb8-db57-45d5-bed1-95f60fa67e92", "value": "T12CB533154CBAE891C0AE6276D423CD912A927938DC96BE27B315636F609FCC33453F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595424, "uuid": "719dcc8a-eb69-4363-8ea6-9c37a31256e0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595424, "uuid": "f7cb831c-c60d-4075-9e9b-4cc5036f6bbb", "value": "49152:zfCoZqcj21THxLlTj4MPB7y75Y24kTBnKbm0wCA7IF5m/cPbtoEjPdRMd:uoZqcj2hxLdjBB7y7O2Jt0w9JcY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719595424, "uuid": "248fec67-0382-4df9-a2b2-6d24e863f13a", "value": 2374144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595424, "uuid": "e1e908d2-fe60-4b8f-af2c-786a72d11870", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5764ef7c-3573-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719595497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595497, "uuid": "a7744bf2-c6ab-4a33-9fef-b803dbec4db7", "comment": "Malware payload", "value": "a562c59e3a4d9be348d5581d23e483db", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595497, "uuid": "e5f1402e-6a8f-4713-aa13-6199ac35b99e", "comment": "Malware payload", "value": "68c00e3bb99dd666c421c6fd6b384ff5641ead666c44936d8e84a9075ff79819", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595497, "uuid": "e649330e-4d06-4c9f-b21e-1e494fba19ae", "value": "T1BF95334BF7B351F1CD9953328D29836765B86EA221614D273D7A39BAC2CFA6C7180C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595497, "uuid": "a4cd37fb-de8e-4ed3-86f6-feb429e85ec8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595497, "uuid": "d19a508f-fe5c-4d82-bd3d-5213deff6500", "value": "49152:ebJVjnY8vUfiefXca+t2ylwSraL+fIawpaXMv:kO8vUKe3aaqgac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719595497, "uuid": "e49cff32-3ae9-433f-a7c4-78070af88c5b", "value": 1899008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719595497, "uuid": "5acdf312-808d-4624-90b8-2643094d0b8c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ff433a-3576-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719596948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596948, "uuid": "500f1e2d-aaa6-426f-a880-b2c3fa15e552", "comment": "Malware payload", "value": "56ca771dc225511b0e3a77eaac501102", "object_relation": "md5", "Tag": [ { "name": "OriginLogger", "colour": "#fc2cae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596948, "uuid": "1e462be3-9907-48b0-84d7-832166376f79", "comment": "Malware payload", "value": "2baae7cc979c95b2181125137678509db7845ce762cdecf2e30e331d7496d3b3", "object_relation": "sha256", "Tag": [ { "name": "OriginLogger", "colour": "#fc2cae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719596948, "uuid": "e1249bea-7b74-42a9-ac7c-c7658db7013a", "value": "T181B53377C14CD454A8AB8BDD3C6DEE6E8334D42D708A562227CC108AF76646642EDF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719596948, "uuid": "a51c99d6-c907-4d8d-b161-ac208220aba5", "value": "49152:Ecn+OKveaMoG0nlOEoBvLKoswbyvotB05gzWtfma1K5suqaU1:E9xveZ4MNjKctDWm5Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719596948, "uuid": "8bdd2d14-84d6-46bb-beee-a4bc0c5273ea", "value": 2276360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719596948, "uuid": "086066a0-e065-437f-b7e6-598b91e209ff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "434854ce-3578-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719597611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597611, "uuid": "c5ff280e-d312-4edc-8c15-353c08c93c06", "comment": "Malware payload (Mirai)", "value": "6768d50b0cedd046af48d3d1a8d487d9", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597611, "uuid": "059aa9b2-3d51-4b55-a9b5-a05ddd703479", "comment": "Malware payload (Mirai)", "value": "bb67ed07426e50d0812ef55b0ea915bcf16285ff56313aef72ccfbd47511ca66", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597611, "uuid": "618b91a6-3bfd-41fd-9d95-2f2657378afe", "value": "T1E5535AC1A643D8F6F82A01719137E7365A73E439113DDA87C7B9E836ED52900EB163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597611, "uuid": "17407017-f124-4567-a1a2-c6bca7fe77a1", "value": "1536:MOf6FP7mQT9+CgAf92NJcJjTqUznSzdvPcifVd7c/4CSQY:ff6BaQT9+EMc1TbzS9Pfn7p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719597611, "uuid": "d2ddfef6-c922-4cca-ba9a-42bc8927e09d", "value": 62772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597611, "uuid": "3231df75-e33a-4ec7-8966-8a50e716eb20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597611, "uuid": "11e24a3f-e213-4585-afdd-a25054757111", "value": "t1ec314dfa2dba5decb3d0a848c31f6fd31a2ad537166075b400b5684527f7d5150b8c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09b02a8e-357c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719599232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599232, "uuid": "b4c42f71-0f76-4542-b41c-d80a42a7a978", "comment": "Malware payload", "value": "bfe4e166869e2c50d669054444f00f39", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599232, "uuid": "79af2933-3633-4979-a423-8606d38100c5", "comment": "Malware payload", "value": "71b9f7e12499c910ff8981df7028b7162dceffa79c69888cf745cfe3321ebc37", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599232, "uuid": "6ba76e6b-dd4f-43ab-8191-f9ae3774b096", "value": "T13B159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599232, "uuid": "75cf84e8-4939-4cd4-b565-e36dafa10aeb", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599232, "uuid": "f86f1ecc-0127-4328-868c-427e5bddf6b3", "value": "12288:aqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Th:aqDEvCTbMWu7rQYlBQcBiT6rprG8aAh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719599232, "uuid": "67d68388-fd00-44fc-ae05-2d02c8deb54e", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599232, "uuid": "a56d4477-9cb1-4f90-94a4-93ce8c822129", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97fda026-357d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719599900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599900, "uuid": "9ffa093b-aeff-46b3-9667-5c6cac7c6694", "comment": "Malware payload (Amadey)", "value": "48748ca4d44fb37a2bae87561b9c9628", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599900, "uuid": "89915de2-af2f-4ef2-bb06-93ff4d33eb99", "comment": "Malware payload (Amadey)", "value": "4a5f3328926926007afa9cb2cba7732499dc3f1bdce00bf534610267c095ee86", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599900, "uuid": "b30345b0-6f39-4d91-a68f-d259141a59cc", "value": "T16C95332C6C07F8CBC3E9D8399592D15E1F28343ED824393D5A48D9EFEBA78A6C1135", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599900, "uuid": "4e3681dd-3639-4b28-89c5-4f22444af0ae", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599900, "uuid": "0d4a0045-d943-462a-af08-b7cc6357f1d8", "value": "49152:mGo0zR7XPRX9UtFfgS7aMcfJyxYQQexFTWw9M9SmiaElUCn:mGbPRXCd7eByWQQoWw9M9Smu5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719599900, "uuid": "c49a9439-b7d9-4026-9580-a2ff6364d8ff", "value": 1896960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599900, "uuid": "8f831400-6e6e-4fc6-9a28-ab04a4601343", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3a5943a-357e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719600376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600376, "uuid": "a23a6692-d280-497a-93f2-854f53e97769", "comment": "Malware payload", "value": "8f617ce621d61490f8145de0c3382f28", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600376, "uuid": "208e8f23-1e0f-45c2-a754-1d92d39e1246", "comment": "Malware payload", "value": "b10d8c037870eab369d88709b4a65bc30ba85a887c85af2550c428999c045cc9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600376, "uuid": "39641cfb-9234-4940-9ff2-3eacc95daa07", "value": "T188B5AF22F392C537C4723A789D1AB26994357D111D3874467BE85F4CDF3AA823F2E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600376, "uuid": "a2d72b07-8f0d-4db9-b46a-43be3cec6221", "value": "1b5ec46ea5b288abd35faaa6c5e29620", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600376, "uuid": "d5c512ba-c54e-4894-bd7a-a320c8214c99", "value": "49152:qpjNvr9ySAOmw4dHHO+SASagXkJr4MDkUwm:qpjNp7p4dHH8n5A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600376, "uuid": "79a80e94-449a-446f-9556-703c71d905a6", "value": 2288128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600376, "uuid": "1c57e392-240a-4475-8d58-bdda0a5d0733", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "306775f7-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1719600586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600586, "uuid": "903c8020-8efa-4a77-a117-95733e50bf29", "comment": "Malware payload (Socks5Systemz)", "value": "b8898e978eefaefdea55a20a2eca2df0", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600586, "uuid": "8fe736ed-82d1-45b1-b63e-a30fbe55dbe2", "comment": "Malware payload (Socks5Systemz)", "value": "fa139d77083c7de082ce68b492b2b23e334eaf0b575696f31749f0b2119bb11e", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600586, "uuid": "0e61df53-7a4e-4fb0-9566-fc282e3ff67c", "value": "T1FA36331EF9965873E0628270917E4094EB6ABF2C0524592D392D8E7F6EF7CF34DA52", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600586, "uuid": "e1f18c8b-30e5-4336-b6c0-0963bf707176", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600586, "uuid": "c69e5d4d-ccff-4ca8-b911-8cb4bac75a5a", "value": "98304:CInM8hKwQUnaZrfcdlAwuhDQ83nzVVLWk4OBV3g0cOgomrgi1AIQxg:3M8h2UaZrUzAwuhz3z7LN4OY0LgrgePJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600586, "uuid": "0b65a176-5868-4845-ac98-f2241fbd3d07", "value": 5322189, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600586, "uuid": "ef6a1622-bd10-4d3d-85e1-a01bb37d1549", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f8dbc60-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1719600611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600611, "uuid": "0f2cacd6-1b5a-4133-b8e4-77b293a5df4c", "comment": "Malware payload (AsyncRAT)", "value": "ada4045ee6399dc5733826a4d7e43a10", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600611, "uuid": "90e7c28c-a8c4-40bf-b958-1bb3e9e83e47", "comment": "Malware payload (AsyncRAT)", "value": "07ecf0ee68a52e1783da654389f5adaa861b5e7cfff04cbec504e721cc3a11ad", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600611, "uuid": "bdd58215-32e0-4e0a-ac7e-dbdd96df6b9b", "value": "T167133A4437E84216E5FF5BFA25B362060771F6038D13DB9E4CD89A9B2B77B808A507", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600611, "uuid": "e1a2cf77-9746-4a56-9e90-8139986a9dd9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600611, "uuid": "df841e1f-6960-448a-877f-25a529b85447", "value": "768:1KjSON6U+0VT7OWCCKUS0BMRjJF5Pa9pmA6vOwhy3/+zc:1gStUJVTa1nFrtF49AA6vOwg2o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600611, "uuid": "f8a2fe1f-7f09-4e91-8c9a-fa7232b14e21", "value": 42496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600611, "uuid": "201ee8cc-239a-49b7-950e-ca8b7188ef24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fe24397-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1719600612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "f1a2252e-7249-4b35-804f-3fc39e652740", "comment": "Malware payload (Formbook)", "value": "3db7f780cfc50d086820b95947a61e59", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "b7f4ae79-52ac-4541-8940-993a4fa2b49a", "comment": "Malware payload (Formbook)", "value": "e2a569f0f5168d11500b6e5f5c0ad0c900c45be7cbab68f0c354318123bf942f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "4c65312c-34d7-45f5-bb0d-3ea012f573bd", "value": "T12534C05C3FA58C41E5ED5E7408B3A368D67C9E732D0D8503E5987EA42B3BD885E123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "7e559c0f-b371-447c-b0ef-cda23cb6a6b0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "693ec143-d47e-4dae-89d1-67713d62c109", "value": "6144:y2lnab4waqIUhcX7elbKTua9bfF/H9d9n:blHqI3X3u+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600612, "uuid": "f9b234cf-513d-427e-ae69-f89d02bb81ad", "value": 236032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "5b1cea57-dd28-4a7f-b335-9a94ed822cb0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40003453-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1719600612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "b075ccc7-1c1a-4ebf-bd2c-7f09ae087b7a", "comment": "Malware payload (AsyncRAT)", "value": "ee1ffa80e2398a0f01a99856c1189b21", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "3c1cb248-2ac6-4abf-8ad3-2f9bc201b970", "comment": "Malware payload (AsyncRAT)", "value": "5ad6806628708095957c45a7f728f941d9b436a25f3f0d2147274403fffd1045", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "67fc895b-b067-4784-8585-52d0cdfdeb6b", "value": "T14034BF5C3FA18C06E5FE4E7408F2A368D63C9E732D098513A5983EA91B37D449E223", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "61a033e1-ab4b-4428-a3af-6b4a3f8d060d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "7b30fee5-d653-4aef-aa4f-cb3937e531ec", "value": "6144:PCMwELbLs3UhcX7elbKTua9bfF/H9d9n:Pds33X3u+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600612, "uuid": "975b74b0-478a-48cb-ae70-cee244b3737f", "value": 247808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "40356fe2-b501-414a-9312-ee40703b07ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "401a50d8-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1719600612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "ab79f194-efd6-4c50-b9ec-31a9f114d22c", "comment": "Malware payload (Formbook)", "value": "1fee5ce12cd61659dd46575a2e378361", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "6477d490-8b4a-4525-af78-1cfad5dc0e5b", "comment": "Malware payload (Formbook)", "value": "ded5515158d7b1ed9520713645bc63d7bb872f0a212c77ebb1afce0d16fad0ce", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "3449b72a-8211-4da4-be22-22357b692ec0", "value": "T16344CF1C3FA68811F5EE5E7408F3A368D63CAE732D09850395583E991B37E889E123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "adf5d09f-032a-4396-b9ef-7466456faa4b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "e24b1070-647b-4fc9-a071-df750f5070de", "value": "3072:vfWp/2bS2/YnEtOryoW8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLnK:dbn/YnWUhcX7elbKTua9bfF/H9d9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600612, "uuid": "22f29379-0e89-4f6a-8e23-887c3e44d71f", "value": 257024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600612, "uuid": "43e2b4f7-b9b3-4cb4-a2b6-d7cf16a7540c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43f46fdb-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719600618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600618, "uuid": "0e0d3c07-1563-4a68-96ce-61066aafd562", "comment": "Malware payload", "value": "7b20c6c1ae8a7fb30666a20540ed992a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600618, "uuid": "ca575e14-a652-436b-8b3b-ce43bb2d9860", "comment": "Malware payload", "value": "0a785a353308e02dfe2b5b3318d6a2a90d7a918dd200d70109fe3eedc3ce69d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600618, "uuid": "49101a33-0f6e-4611-bb5b-c4faa2407560", "value": "T1C444BF2C3FA58C45F5EE4EB408F2A368D63CAE732D09851395583E991B37E889D123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600618, "uuid": "923c98bf-a9bd-48c5-a42a-71c61c92a906", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600618, "uuid": "40aecd5b-db19-4ecd-a3be-0507f7e42a45", "value": "6144:BV4/b1Gx1MVvUhcX7elbKTua9bfF/H9d9n:4JcEv3X3u+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719600618, "uuid": "ee6050a8-9a33-4e32-a523-5fc8e7e3986a", "value": 253952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600618, "uuid": "159583dc-4aef-4af5-8173-9db2fc81f5de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e917c14-3581-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719601629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601629, "uuid": "c7da2a7a-c0ed-4bf2-98bb-79cf00602cad", "comment": "Malware payload", "value": "a492c3a7274138520cb977971fb13fb5", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601629, "uuid": "3fae96d8-515b-4465-b7b4-e646bea0702d", "comment": "Malware payload", "value": "a1457b84a274cb040717e14e6e498da2a6c2e9308d53de158a022cfe61b5f993", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601629, "uuid": "02fe19d7-938b-4638-b34c-ed6c18b8e417", "value": "T1C1D2F91312DE7EE6E57806703B3347C5C72DDE064613DA2E79C83569AA7E2437A423", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601629, "uuid": "d0a60473-c83e-45d7-a5d4-3e3f81e4abe3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601629, "uuid": "e9a0473a-dff6-4ced-ae9e-aadcc3b9706e", "value": "384:rBYCEfLEzjMVSbr8FZcJULW45nQfjAy8F4sfae2iYcMT:rBYCEfLEeyQHuY3aJiYcMT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719601629, "uuid": "dffec7fd-a7f3-4fff-ad79-0c1303c9ebe6", "value": 30720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601629, "uuid": "c93af5e7-678d-4029-86a9-6c7c20a219cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a005ad84-3581-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719601632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601632, "uuid": "51621dfc-b503-4f27-9970-1068914d90ba", "comment": "Malware payload", "value": "eeb5aea8665b92517e3889320fae040f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601632, "uuid": "e6d87162-b54b-4564-8272-e445af554075", "comment": "Malware payload", "value": "e72fd599e9ff93073cb85d4c50c4dc038bb1fa8e9cffa2a33c18e4a7f693130b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601632, "uuid": "6b98aee7-27c6-4895-b572-324e96b316cb", "value": "T1C785CFC34190A42D3638B904DA5609FFCC873476E09495DF84BC70EDA92AFBD764DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601632, "uuid": "cb11c889-6963-49fb-80d1-cc5f3daf7dc2", "value": "24576:5tm9No8ad/fa0s0P0F7Nm5yEuYr97Y0SG3Jd55DUM8L1AluOwR:7C8fa06MuGK6zB8L1AoR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719601632, "uuid": "c4857842-755f-4352-8c03-c8372078df93", "value": 1708366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601632, "uuid": "49403f7e-bd8d-4679-a535-d6847b8ae3dc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13031a28-3582-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719601825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601825, "uuid": "9e08d19f-4626-4828-8da2-a6673d11e3d9", "comment": "Malware payload", "value": "cd40f8d040148c918958397fddf732ff", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601825, "uuid": "dc602005-15ec-458c-aeeb-0d4d3178d10b", "comment": "Malware payload", "value": "3ae33d9662991e951151570994d416f2a2d20eaa48fca98615dc0117621a905d", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601825, "uuid": "483beb85-e25e-4ec0-9b25-d996fb2c3391", "value": "T100372287FB89DD6BC0F783B2C1770726315B4D255703C5B72A54F23824B7AD16A82A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601825, "uuid": "646698c4-7739-4e56-9e84-b6a26c9e8a6b", "value": "393216:pyTZoroesyTZoroeFyTZoroeb6yTZoroecyTZoroeoyTZoroeRuq/OzhLVCk3Znn:UFeDjFeDgFeDbRFeDTFeDPFeDRdWhZCG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719601825, "uuid": "d32fd68f-1724-4eac-834d-0f1c77ef9cd2", "value": 23216174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601825, "uuid": "bccb48f2-1da8-4c20-86af-1a12ca2b9e22", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b89f28d-3582-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719601866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601866, "uuid": "34bc14f2-a764-4904-bf9a-730e3cd1f78b", "comment": "Malware payload", "value": "ecfa7544194ce7a5e2624249e1480435", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601866, "uuid": "09be8dad-1219-4ea3-a65e-96cc46deff58", "comment": "Malware payload", "value": "8dd7f4c0ffa931e2185904133c70a6068702cc27b01f931950d2e7434d88d120", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601866, "uuid": "e39da59b-5cd5-4119-93d0-a84d4a92ff87", "value": "T1C91733A6AF8FD125E5A3D076D236192BEF2440490F61F14243117298AFFBE90C746F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601866, "uuid": "38dfd4a8-9f61-4f27-bb08-4c5a7b403171", "value": "393216:plCi4P49K6MnFw+/IuySTFpZaeE8zL0JM++smykhJk815yQ3zZXsX:plYPDK8/7TFDa1MHzhJk815TzZX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719601866, "uuid": "064b1329-a72e-4a38-95de-b17b718dffaf", "value": 18522040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719601866, "uuid": "70c8c095-99a1-4c46-a57d-afeb399702f6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e4180f6-3589-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719604904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604904, "uuid": "7e85487e-bcfb-4dc7-a94f-a433ced6f10c", "comment": "Malware payload (Amadey)", "value": "41327f38f138a156bf02e81f5047dc06", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604904, "uuid": "f8cd3c76-9102-4289-968f-4169c279b735", "comment": "Malware payload (Amadey)", "value": "7cfa96ddab555419b82206c2f1f1dd16567a083421cf0e99d6abf2e03fc551d9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604904, "uuid": "e27950f8-9b38-42f6-a5ec-36107745f251", "value": "T1FB95332C76CBDBB9CD4749BBE4B784466DB74C0F772E5E268B62482BC203B4076264", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604904, "uuid": "eef32704-59b8-41d1-bcb9-8226d6644adf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604904, "uuid": "cac579d5-ca35-410a-bcae-6679e647791f", "value": "49152:BEkBzdBptx3vjjs9nV/r0QTWcitpj2aapepCiGdZeME:ZDBpA9V/r0yOtpj2SqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719604904, "uuid": "c7690eec-e99d-4bda-b1a7-ef855e9c066f", "value": 1899520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604904, "uuid": "5c14beac-79a8-4806-84f6-d21303f3dd48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52b74f5d-3589-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719604938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604938, "uuid": "cae7cd0d-9bd6-42da-8a18-e48860ba5180", "comment": "Malware payload", "value": "b9b513ba600e0bbf6f72129ba99ba72e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604938, "uuid": "3b892c41-4ece-4798-9837-9e15653fe63e", "comment": "Malware payload", "value": "d5c430d9bf0399ab858ec30bdeeaf5e33fcce1a5f534c2f5132b0fa2bcd2aeab", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604938, "uuid": "8f6bf272-7c10-46ea-99fc-8e4b8a4b4a74", "value": "T15451E0223EBD2269D521A260B95E6E10B247AADE701CC1F732EC141F4B1574DB1FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604938, "uuid": "fff14e78-a843-4ad0-8c18-55a34601d509", "value": "48:3hieAOUf1QvS1rd39lVMUnfYEOH6xQWpiXpJSbJN6J4ZJjsJu883W7:Fbg59lKgfY4piji+qq2W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719604938, "uuid": "8b523df0-5d57-46e6-8645-81d1b19b0798", "value": 2472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604938, "uuid": "6c8a05c7-f901-4353-bbf6-5e17221b8237", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62e9ff3a-3589-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719604965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604965, "uuid": "9291aaa2-1e7c-4a3c-9f28-c8d0762d76b4", "comment": "Malware payload", "value": "10b8399f2dbedc9e97ee3a4e094258e2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604965, "uuid": "0651f15c-3118-40ae-b05b-04557cb09326", "comment": "Malware payload", "value": "a53ecd87816b3b67e565c14c5e10e6a39a91400f8bb1d616abb15b7ea456b687", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604965, "uuid": "97255618-dba6-4a10-a3d3-5a0867bfc365", "value": "T18554E512A5E2EC25E3A387347F3897CC6B7F79D36D318A4E11506D1A19716A8CB837", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604965, "uuid": "910732cc-7491-4812-8c51-68e11362d19f", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604965, "uuid": "f880debc-e8a4-40d8-babd-8657238cac27", "value": "3072:79o+JLzTGu51dqJutzirBnn8B+ycWmPyzBQ85Nge/qBeATlTzXmZFqNsyKHm:RPJLzT1tirBC+p6qbBpzXmZQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719604965, "uuid": "bbf9234e-f46c-4227-ba83-7f4f4503abd0", "value": 284160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719604965, "uuid": "8ed6ed7e-7518-447f-baec-cf03814a1779", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90c1e04c-3589-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719605042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605042, "uuid": "3bf5ed1e-ed54-4983-9e62-be38bce5d50c", "comment": "Malware payload", "value": "7360c318e526cb42fc0cb82cb1d06790", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605042, "uuid": "c03b0b66-4891-45a1-a19b-f947574054ab", "comment": "Malware payload", "value": "1817b094b59144d35875b61c1657759e1a2ba0629a7b41ffa8be59a93b6a3e35", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605042, "uuid": "881a8bab-63d9-426f-8be6-04ec34757044", "value": "T16E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605042, "uuid": "d50f7b1f-d61b-442a-8b97-910820c99355", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605042, "uuid": "a79627e5-be91-4ad6-8049-6098128a8ef5", "value": "12288:WqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TV:WqDEvCTbMWu7rQYlBQcBiT6rprG8aAV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605042, "uuid": "bce8b6e0-753d-46a3-9518-025cd9d19759", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605042, "uuid": "e6942b60-fed5-42dd-bf26-141f07f5bff7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b919d28-3589-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719605069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605069, "uuid": "f3180d7b-2659-4a77-84cd-ed9c9ccffa14", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "1be8c4bcaef6d4c9371d36c710ec251b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605069, "uuid": "7c275a17-ae24-4b9c-8d39-ce9eafb234f9", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "ea8303a1d56eb9103035cf7859bd8cd906b4c4034850b12fc540fd139872defd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605069, "uuid": "cfff51a2-6f01-4875-9707-b871c7eb56a9", "value": "T120D4BD12B5E2F915E3A787307F3992E87B6F79D36C754A4E11522F0A0B712A8C9437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605069, "uuid": "8944fdb5-1910-49c5-bc58-acfa6c8fce2e", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605069, "uuid": "e925d638-ea5d-4c50-a01d-bac8ca42c461", "value": "12288:JyP/wItiHYudVP6QzF66i9PTQvIbjhc7natVC+R:kwMsYuHlE6i5TQvI2nyR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605069, "uuid": "2e1bc968-6371-4917-90cf-13a7d67bf4ca", "value": 622592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605069, "uuid": "a9dd0071-0d63-4c20-9dc5-0f7d04fafe63", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1707b64-3589-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719605178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605178, "uuid": "d7a558dd-ffc1-4d9d-a06b-aa53cb51d3d2", "comment": "Malware payload (GCleaner)", "value": "22ebbaa014867608e73b8e5f4b07793a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605178, "uuid": "89434651-85e9-45aa-a841-3eff07867b39", "comment": "Malware payload (GCleaner)", "value": "5090b5bc5be8640d2e14e1503f6a6aa9119c4ebcbdb2a5ddc44ff3276f35b5a9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605178, "uuid": "0350a82f-8089-41fa-8d66-e578bcfd20e0", "value": "T115742853A6E2ED75F3A387307F3896D82BBF79D36D318A4E11541D1A09316A8C9873", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605178, "uuid": "0d7ec2a3-bf04-49b5-aa84-f0ac27ca6187", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605178, "uuid": "af84ba70-252f-4b6a-9854-49709463eead", "value": "6144:xYLzwPmNqqiF+u3ct2Ukd+eMPs0EOGCbM9ezXmZQL:2PweoZcEUkLMUZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605178, "uuid": "b6a1a016-3168-4ba3-bc71-43aff185f7a1", "value": 340992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605178, "uuid": "1d687c39-70bc-4e3d-95d3-7eb0bef9bc76", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a7609fd-358a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719605381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605381, "uuid": "1c1d715f-79d2-48ce-a166-79de6d7a5c31", "comment": "Malware payload", "value": "1e5984fbd5aa466b78bfc49cac2163f7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605381, "uuid": "786db5b5-fed6-4a3d-9b4d-dc98e3c24aa0", "comment": "Malware payload", "value": "64e600221b25ddede9ed87c0b07d0341ec24aea839e7580c7a05d93d5ef06c8a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605381, "uuid": "a1e4241b-2d63-4f7e-ab57-bfb548cbec2e", "value": "T1F854F613A5E2F815E3A387307F39B2D87B6F79E36EF14A4E21501E1A19315A8D9437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605381, "uuid": "ba7fd339-1f91-4141-be6d-898d3bfddd29", "value": "cfa8eb6775339152b6c1bcda40b1591e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605381, "uuid": "363fbc99-2107-462e-afd7-dd1b61fe2678", "value": "3072:F0d+mL2zJu51dqIJLKvKs/iViPjxhqRck+5uge/qNxpXATlTzXmZFqNsyKHm:CsmL2zABsKVi9hKcXbNvqzXmZQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605381, "uuid": "6660c581-d109-4323-a08b-12da406cb262", "value": 284160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605381, "uuid": "9cc9e498-f9f3-4c98-af10-feaea5756774", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d02052c5-358a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1719605578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605578, "uuid": "dda32f07-7441-4beb-9d09-7852c13aa456", "comment": "Malware payload (Stealc)", "value": "b3badd1cd2cba4f587bd6737d34d3569", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605578, "uuid": "fbee1b31-6075-4830-89ae-2519010e28b7", "comment": "Malware payload (Stealc)", "value": "9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605578, "uuid": "a580ce5f-e8d2-4fc7-8cc4-d2d77ff2c849", "value": "T1A0C5332CE4A94452C0536EB6B4D3504B521B31CFBAA49AAB3FE1DB3FB952534C739B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605578, "uuid": "44b19292-a34c-4b48-bd47-f0aa7324ca2f", "value": "001806c33a6e9fe5fbff34bdbd79b591", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605578, "uuid": "87af1959-0660-4c5a-8fb7-8919baa2ab45", "value": "49152:rh/Kr1IeHpgDfCeER3nsxnC+Nisx8rAmTYQ:rVKBpHeDXERcM+sAW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605578, "uuid": "9551a8f6-8d34-4dbb-81d7-294c08879521", "value": 2509824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605578, "uuid": "422d64bb-c4e7-4241-b4cd-6b7108e7f278", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "601655a1-358b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719605820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605820, "uuid": "ea76f984-a828-44da-afc9-6a3ace8fd20f", "comment": "Malware payload", "value": "fde27b2efcdbc8e6db902b42f37d12c0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605820, "uuid": "df14e6de-f913-494b-9f37-c98089d82680", "comment": "Malware payload", "value": "cd1da47ff6de0f0c877825b389d68c6260195814a3045c34b13c6b1b0cb976ef", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605820, "uuid": "78e213c0-7670-4459-8dfc-1b83931a279e", "value": "T108B5338595C44D61E2076576C0A7CE112A21BE34CEAB3F0A8B95E4BFB450AC3F65DE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605820, "uuid": "76822947-a4ec-4591-a4c1-eb993e7b96c5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605820, "uuid": "46dd9bee-a0ef-4552-a51c-ca3c9a052508", "value": "49152:NLEWTfQSsS4WwmSWOf4pwl8ogLI86g/P:NLEWTf1s4F2GJoyd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605820, "uuid": "23c4964b-b01b-4466-9eaf-34bb96987bf1", "value": 2408960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605820, "uuid": "2177d513-b0d2-4353-9f9b-5500d1e352fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b94e9efb-358b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719605969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605969, "uuid": "61ceef25-1ca5-4dfa-ac32-43006df051f6", "comment": "Malware payload", "value": "8c184873aab580dbe1c893f521a33d2d", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605969, "uuid": "8f7c1325-6228-4368-a772-657588bf1636", "comment": "Malware payload", "value": "4a6604ac4df2319fca1238caad6e6a735399f8b26ad03d1484b053fece2780c2", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605969, "uuid": "fd4bbab3-5eab-43e6-900e-5de1047b4e47", "value": "T149D51282F7EA1D2EDDB780360F9B473516168E46C643DB0B89A8763D68776C40F89B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605969, "uuid": "8ae8b052-9468-40e4-a7ef-a78e3cd9747c", "value": "49152:P3bJCKhFWhrcdC50fhovaaSu4nIUkvKOnJtiWEEvdtHkHXO+2der0hECnoddXAva:PlCaWGC5oPaSu47kKOJtjE53L2dWgETv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719605969, "uuid": "b8ae055b-728e-44eb-bd95-09b4ea0f4b65", "value": 2940979, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719605969, "uuid": "127eb087-bf2c-450c-87d3-bb49c995f4db", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "167e771e-358c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1719606126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606126, "uuid": "fb6387aa-9597-4760-8822-e825a598fc48", "comment": "Malware payload (Mirai)", "value": "a542b07e5a587db4a8d3a4d843ecfac1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606126, "uuid": "af5472d7-3e5f-40fa-a13d-03b0af5ed672", "comment": "Malware payload (Mirai)", "value": "61d81c2f32da1ac3033e9132b61926b8342310c6ba2e899773a8d6f078d229f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719606126, "uuid": "d688de88-98b5-41a2-8621-0baed715b9da", "value": "T183F33B46EA818A13C4D2177AF6DF424533239B64D3DB73069928BFB43F8679E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719606126, "uuid": "de86d903-cb61-44fb-84e5-a333954c089e", "value": "3072:30MUdi18VNT8aSmiuM1Z9665rhWycqsci/mCGM/9HODF9z+:30MUQ1ad8aSmiuM1/6MWxRci/mrM/9qK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719606126, "uuid": "b9ca5e89-d865-4b53-8155-38b4f9648a08", "value": 157306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719606126, "uuid": "d865a079-9e4e-47f4-9618-98b1ce9e6d21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719606126, "uuid": "dc4bfc33-3455-49fc-bead-a553f1640226", "value": "t10131dd32972141196a51cd50dcfd87f1262987572345af73df3ac58c682e05af62bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69684090-358e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1719607124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607124, "uuid": "58cd8fad-cd0f-4d2e-8274-cc195d4d3923", "comment": "Malware payload (VenomRAT)", "value": "338cee4d2b3e4d1a0ce18dd982eefbcd", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607124, "uuid": "9c9981c0-ebf6-4717-9d82-329c015f493d", "comment": "Malware payload (VenomRAT)", "value": "bfaa1a2e64a91e8d1cc56bc9ac7d906b135b41d5b155c43af147e6590c596cd6", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607124, "uuid": "9727fba2-3631-43d9-9774-25efabd4073b", "value": "T1DA734A003BD4CD26F2AE47B9BCF252074EF4D65B6415CE9E3CC404DE5A66BC58A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607124, "uuid": "2de138f6-b4e9-4c51-8e93-003ed91eb2de", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607124, "uuid": "c10c76f1-0ae2-454b-abd5-15bad08d347e", "value": "1536:CSUEkcxNYungvHZDJ/SkXizIqksbLvPMwS2n6g3dHKH1blbTFxXbwzUQbVclN:CSUxcxNYungPZDJ/SkXizIqks/vPMwSP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719607124, "uuid": "cbf3ac1e-a38f-46ab-a5c9-27387d2defef", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607124, "uuid": "14cee353-39eb-4737-acd5-84bad7dac1bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10b34b41-3590-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1719607834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607834, "uuid": "7df5ecac-6344-43f3-9dd9-275ea796d950", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "52d0f520be5a8c709578e851fbe6f9b3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607834, "uuid": "dafec3b5-121a-4efb-bbbc-36f359e6a0b0", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "6cf2d68f1ab491ccfaef134c01aac4c5d4e0136fcb0694693003ac98cdb54f1d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607834, "uuid": "37e0f950-3e36-4a93-b4bf-0f9f37f56b1c", "value": "T185D4BE13A5E2F915F3B757307F7892DC7B2FB9D72D318A8E15102E1A1931AA8C9137", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607834, "uuid": "2550f059-c7a1-4702-8655-828a2deca519", "value": "a3ed9b65935bae864a9e0a3cef5074eb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607834, "uuid": "ba907da3-6bb9-4c97-82ff-3aa750100a09", "value": "6144:PLIe0LVmIEKw/BMJ6Jm4DRa8GoVn+CEzDvIlfR9J6+ElT44RmMBrctOE2Iqb9Hv1:PEeqVNEKwgimspANvIlfRrPOpmMqD4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719607834, "uuid": "35f479ac-1e03-49c2-8e11-8104a830f94e", "value": 617984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607834, "uuid": "ea47b181-0776-47f5-aefc-1e7b6128a32a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7617c869-3590-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1719608059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608059, "uuid": "9b325281-ec86-458f-af3d-bca3d8b51c4f", "comment": "Malware payload (Amadey)", "value": "5278e6e085638ead6d6a850151d33f31", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608059, "uuid": "5c0057cc-47f1-4aa7-ba04-6b19915aa8ee", "comment": "Malware payload (Amadey)", "value": "ddcf6d110847773ad80a3b32528350763f384cd4fb57f4d85a353ef005bbfa31", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608059, "uuid": "67d783bf-1c41-485e-99d0-1e574d224f4b", "value": "T11295335B1F56CFBBDD310637175932EA79F987521460CDC0192039A259BBB8A2C8CC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608059, "uuid": "4b6a18e4-fa96-4e6c-9306-ddff33d6c604", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608059, "uuid": "f18b932f-2830-4dfe-8e91-2fd7a819afdd", "value": "49152:S5cnhurw+xxzUpqBeeyF1xxqUr2olzweb4:S5shuk+jzGqAFTaol8Y4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719608059, "uuid": "15ffa575-9f05-45b2-a321-4ec2fce42698", "value": 1905664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608059, "uuid": "37f41e7a-e881-4354-9932-aa6f878fc2f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7d73011-3591-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719608544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608544, "uuid": "44128298-9449-4d25-85f3-f702e94fe8ca", "comment": "Malware payload", "value": "fb2816295905f86aba8e5d7fe2662179", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608544, "uuid": "ef7d41fc-3d9e-4ed2-8262-8334d12908cd", "comment": "Malware payload", "value": "3f90707abcf802f15c690071fd7ecc8845b327f6d81f84cae6b694943846de30", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608544, "uuid": "7fb60bc2-5f9c-4da1-9477-6a04c8531f34", "value": "T1D1B5333689A180F6CAC9B27C923BC941ABE4343DEEC3B660D359716EF610343D6C1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608544, "uuid": "f7a9273d-75eb-4f21-a5dc-b172476f0751", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608544, "uuid": "8d21e282-6181-498a-96d8-603ef2be3e50", "value": "49152:YXPZQlhy5q68ce1vMzyarX4RZ0hgAnQG7bQCbQTr6BNJS:YOlWq68D1WIRAg+b/9JS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719608544, "uuid": "4a2ad9cb-7b6d-4ff8-8db3-fe78a1c81cf9", "value": 2402304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608544, "uuid": "5122183d-c345-49da-8ddc-61f7dc12bbfc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "785949f3-3592-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719608867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608867, "uuid": "fc19fb15-482d-4e7d-bc5a-5b23ace26b26", "comment": "Malware payload", "value": "69d5a9ee4a3b17db5d3603c0270dfe53", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608867, "uuid": "8203dd56-f726-456d-a898-53b64751c5d3", "comment": "Malware payload", "value": "b535d80d71301d19db41e89b96b6c62df50970ccc05fea7efbc6bdf372ad26c9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608867, "uuid": "9dd620ce-5960-4c1e-ac1e-d0193ed31fdb", "value": "T1EB159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608867, "uuid": "792e7dc0-0118-4ff7-bbfb-0e3e92dc808a", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608867, "uuid": "15c98212-b40b-4aeb-b27b-ad714c5b6c74", "value": "12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TN:JqDEvCTbMWu7rQYlBQcBiT6rprG8aAN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719608867, "uuid": "bb3ac05a-91df-4654-a53e-5421e45b342f", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608867, "uuid": "bd529e57-1c3f-4c41-bd96-adb9360e511a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05308f1b-3596-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719610392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610392, "uuid": "cfa213af-9b75-4c79-bbea-8397ace81764", "comment": "Malware payload", "value": "c3db22b12e9f6dc730cf023097b7e74e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610392, "uuid": "ae968eb5-5946-4054-85f4-d8c2bee18e39", "comment": "Malware payload", "value": "a0a89141941e64f36ee9c0dcadd6a0e1cbe813608270908025dc7d26ef15bb6a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719610392, "uuid": "812d733b-a9d9-4c09-b923-7e2b6d22f8b9", "value": "T1DE54E693A9F6E811E7B7E7307F3892D83B6F79D36D314A4E15109E1A09312A8C9537", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719610392, "uuid": "3b1788c6-02bd-4206-8b26-7ecc6f35bdc6", "value": "add5b12dac4e6ed7ab64a15ab04a2c5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719610392, "uuid": "addbcb78-765b-4dbf-a268-4f92eac88e4f", "value": "3072:sDILcO9f3/+YiWmdghXj0HIBb8a+5dge/qjQkATlTzXmZFqNsyKHm:1LcONv+7nihXjEIN8apbj8zXmZQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719610392, "uuid": "fb7092b8-82b6-49e3-92e8-59621f0071f1", "value": 279552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719610392, "uuid": "e8671253-8178-4cc5-907d-0762b80473da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f40d3ce3-3597-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1719611222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611222, "uuid": "7333085b-5258-42ff-8a0d-ea5fa00391bc", "comment": "Malware payload (GCleaner)", "value": "13d7564ce1e87e2f98bd13eed5f0f4f1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611222, "uuid": "1765c80a-8a7a-45b4-a85a-78cc52ba059a", "comment": "Malware payload (GCleaner)", "value": "cc4ae4792c606091264479d5183871e171fbe5911485d0afcad27c1b409be529", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611222, "uuid": "6ffde5af-5a54-4d78-a0eb-7ce8a147b956", "value": "T116641712E5F2E851F7A387387F3896DC3B6F79D36C228B4E11106E5A19716A8C9437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611222, "uuid": "4ae4400d-d0e8-4ef8-87ee-880315907555", "value": "a3ed9b65935bae864a9e0a3cef5074eb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611222, "uuid": "759b2a67-97a3-4222-804b-d957ee86216e", "value": "6144:fB0LUhlaOvVvHVqbF4ftC0zbXBzXmZQL:G4hlaOvVfEFehB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719611222, "uuid": "7ef96064-5419-45cd-8e35-ac65ac3e4efb", "value": 335360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719611222, "uuid": "5d056393-fdb4-427f-92a2-7d8e369c1ed1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc589dec-3599-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719612041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612041, "uuid": "ea1de111-125a-4bb1-ac6f-c77c02cfaa5c", "comment": "Malware payload", "value": "dc861f7f216f2ec1a1cce2e06ba006ed", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612041, "uuid": "e695ac77-c729-4042-bae4-4b35d2d2e27e", "comment": "Malware payload", "value": "442f9eac9fc2570b131e87c89d9eb796f5eb6ce25d98566588771019e116d727", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612041, "uuid": "4a2b42df-38b4-461f-a297-1193aba91934", "value": "T1BE9533A60C278A4DDA4C4D3A919BDAFDB3726771C760DE6A0DAF7238705705B73302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612041, "uuid": "74bb4dc3-9a64-4009-8544-a7c0808c8716", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612041, "uuid": "ec8d723c-d967-4fa0-ab67-087652a7f12d", "value": "49152:L4XpNABXW4rDKTaM3sE937C81fbI8AHJ:sH2vDKx3x37CKTfAp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719612041, "uuid": "44d7e6cc-8625-4a72-ac7c-ed81de9ec105", "value": 1938432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612041, "uuid": "523fcabb-b3e6-4780-b903-555ce32470e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e733fc1-359a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719612206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612206, "uuid": "c07b47b0-06c9-4f74-898d-497d7380da26", "comment": "Malware payload", "value": "d7f8ceee0436c5cf4ac60618edf87a53", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612206, "uuid": "3f31a3d1-de9f-4a71-bd5e-1724c2d43ecc", "comment": "Malware payload", "value": "09d1a4a7c559065ab5493f7f4e930ad42d4e414303ea82404c93d3bd995b5092", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612206, "uuid": "b95895c3-c243-4568-aab8-5b18bb7e610f", "value": "T1D8159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612206, "uuid": "bd4cf9e3-ca65-402c-a3f4-b2b888a4f5b7", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612206, "uuid": "3cd98273-b473-422d-be69-b14d696a988e", "value": "12288:XqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TX:XqDEvCTbMWu7rQYlBQcBiT6rprG8aAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719612206, "uuid": "bed697e2-deda-42f9-8042-6fba06472866", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612206, "uuid": "14d7c6d0-1883-435d-bad8-e6308b6de9fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a247f70-359a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719612252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612252, "uuid": "ff88c327-17d1-415c-a73e-01ab2ea6ec2b", "comment": "Malware payload", "value": "492fef8c5ecb4693987de95f8c24908e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612252, "uuid": "8d22b6ec-255c-417a-a855-c972dff42d8d", "comment": "Malware payload", "value": "0671549ddee8a0611431d3290518f05ad3cf1edb2826e8abac69bdaed3b676e0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612252, "uuid": "dd0661d8-f464-46d7-a70f-f51bd6fa2327", "value": "T109B5339E94E4E4BBC3AAC772DC7FCE056C2034A7EE6732138559A55F703530B4A938", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612252, "uuid": "63ef9796-0115-4487-9ce1-e54f3fcb6d71", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612252, "uuid": "8c0c83e0-e0d5-4569-84ee-e27427ae6090", "value": "49152:tWjG8f4Oj1d2afRnSnrtvfSr5vDGMS69bq2KP3x:tp8gO5dZfR4tvfSr5qN0HQ3x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719612252, "uuid": "94d10bea-17af-489d-961f-3ee4d2da8158", "value": 2372608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612252, "uuid": "b9c000e7-4a24-4bbc-8112-558eee5ad489", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "890212ac-359b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719612760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612760, "uuid": "26c8bbb3-4417-42bf-b329-a38517cac91d", "comment": "Malware payload", "value": "5c11b174ff83ef23b3afc18f02225dd9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612760, "uuid": "544e9281-3bc7-406e-94f6-1805e252d9d8", "comment": "Malware payload", "value": "44856fc35df4d456efa580cd301ef83be8a7c53c377a41514fed2b0449dd2583", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612760, "uuid": "dec8ba51-3628-4a4e-9b1f-d212a457bbbb", "value": "T19144F613A5E7EA35E7B387307F3892D87B6F79D36E324A4E15121E1A19311A8C9037", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612760, "uuid": "e1e34613-d4d3-42b9-9ef7-5ef088ef5e4b", "value": "add5b12dac4e6ed7ab64a15ab04a2c5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612760, "uuid": "7e70b675-ec50-45be-bb23-ac7a57ee703c", "value": "3072:sJ8LX1RfsRhYfkWLlnNoHGCsI5Lge/qXATlTzXmZFqNsyKHm:XLX1BaGLlnNcvsNbqzXmZQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719612760, "uuid": "011c9d1f-dd82-4480-934a-89333e774564", "value": 278016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612760, "uuid": "c07a9079-c486-4ae3-82ad-858044930e49", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "322c898a-35a5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719616909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616909, "uuid": "11d5c357-fb05-4b86-b05d-2da0e365a382", "comment": "Malware payload", "value": "b9dd1636c968d62dc29652e5767dd2d8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616909, "uuid": "84b01ccb-f8dd-47a5-996b-4a4db719d2c9", "comment": "Malware payload", "value": "056acc8eb20691561e49daf5b2d621a4f4428039d6e26d560720cc972edc5296", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719616909, "uuid": "f9236e7c-3649-461b-80e5-f3ee605b61bd", "value": "T158363396C70546B4E252CF358E1E442F0C2F3FAE9538F388769D42AF8B5E0B219877", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719616909, "uuid": "c512fbca-1361-46d7-ba21-d60be63dc6e0", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719616909, "uuid": "2f406ffe-20ee-49cb-a279-b263e5ee8ece", "value": "98304:CPqGAWvkNrerFtNTLPJTtFndJUu8UkNsjPBZb5N0dmqrVMQxg:9W2er5jJTtPJRsNsrH5NGmqreQC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719616909, "uuid": "25acdca9-e5dc-4724-bd0b-077df18f15dc", "value": 5128917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719616909, "uuid": "9470034d-b468-4f46-bdaf-0d48978d18e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a24195b9-35a7-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1719617956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617956, "uuid": "a921c9e7-35e2-4c0a-ab06-ad968f715b72", "comment": "Malware payload", "value": "a8a5bb77ad9c654a552178b562d8f860", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617956, "uuid": "2a3512dc-9610-41a9-8f3e-dea069a9ec32", "comment": "Malware payload", "value": "578bfd1f370fd3d6af9abdda79be6b5be08e48236ca87c275424b66556ad9097", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1719617956, "uuid": "a8083449-9773-4cdc-a4d1-755c6b858328", "value": "T1BA159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1719617956, "uuid": "0b5eb66f-cd9c-49d3-89fd-299b9fc015d9", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1719617956, "uuid": "7ee01ee9-8045-4a37-a0ce-fc8b31d5b4f7", "value": "12288:gqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tr:gqDEvCTbMWu7rQYlBQcBiT6rprG8aAr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1719617956, "uuid": "dc0fcff4-e8e0-41b1-b434-109cb25586c7", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1719617956, "uuid": "d3f472ad-424d-4b2d-8c87-978a5c47875e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532880, "uuid": "8ccabe78-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.250.247:44887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532925, "uuid": "a7be2550-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.116.7:50290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532985, "uuid": "cb5a2077-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.152.49.141:50830/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532987, "uuid": "cc931ea6-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.184:58793/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532987, "uuid": "ccb7cc23-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.27.172:44205/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532987, "uuid": "ccbdab8a-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.247.26:46196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532988, "uuid": "cd017699-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.19.210:55076/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532988, "uuid": "cd1d5121-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.114.97:52658/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532990, "uuid": "ce530c86-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.48:44924/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532992, "uuid": "cf75cedb-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.127:54509/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532993, "uuid": "cff6636f-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.50.236:44168/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532997, "uuid": "d2bf3337-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.139:33156/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719532998, "uuid": "d32b4801-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.129.114:59908/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533000, "uuid": "d3faab4e-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.191.234:38486/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533000, "uuid": "d422e03f-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.108:33745/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533000, "uuid": "d42e4350-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.240.210:41530/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533001, "uuid": "d49506ef-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.89.92:54801/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533001, "uuid": "d4d0590b-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.246.195.19:43643/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533006, "uuid": "d7b7253c-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.132.23:44271/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533009, "uuid": "d963922a-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.244.70:54762/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533020, "uuid": "e00a1d53-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.161:55948/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533020, "uuid": "e03ee03a-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.47.82.26:59710/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533051, "uuid": "f2b57d5f-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.191.251.10:37685/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533112, "uuid": "174abb05-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.145:46734/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533183, "uuid": "41565fa6-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.168:60287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533286, "uuid": "7eb41a3b-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.96.37:58404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533287, "uuid": "7f165a06-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.177.166:45590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533354, "uuid": "a771469f-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.125:54168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533420, "uuid": "ce9d1d30-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.12.176:35596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533467, "uuid": "eac6404a-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.252:42560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533474, "uuid": "ee93eccb-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.117:42663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533475, "uuid": "efa7c540-34e2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.148.170:33415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533652, "uuid": "58beb2ea-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.141:47465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533829, "uuid": "c22cd137-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.143.185:49618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533833, "uuid": "c4c94734-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.211:51269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533891, "uuid": "e78cc950-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.12.70:34125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533893, "uuid": "e8cc500b-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.209.61.43:41675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533914, "uuid": "f55189a7-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.142.147:49395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533929, "uuid": "fe0055b4-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.49.30:59542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719533954, "uuid": "0cd15636-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.120.95:38029/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534016, "uuid": "31a806a1-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.119:58269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534067, "uuid": "50218e3a-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.117:49662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534080, "uuid": "57e020ac-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.88.219:51848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534126, "uuid": "73544915-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.108:45399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534141, "uuid": "7c8d2d4c-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.214.65:54244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534145, "uuid": "7e82d87a-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.157.28:40690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534193, "uuid": "9b17c019-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.124.153:45211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534246, "uuid": "baef67e6-34e4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.64.198:36698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534373, "uuid": "06e8c7f1-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.217.195:60666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534430, "uuid": "2870e381-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.149.51:38190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534487, "uuid": "4aa45748-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.233:44639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534494, "uuid": "4eda12c3-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.165.189:36874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534616, "uuid": "97868df2-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.45:33981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534625, "uuid": "9d11a59b-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.90.65.232:47908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534638, "uuid": "a491c330-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.250.247:44887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534675, "uuid": "ba551b75-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.247.26:46196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534678, "uuid": "bc3c0e25-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.196:49337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534681, "uuid": "be3c1018-34e5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.78.187:50727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534796, "uuid": "02ae1c37-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.209.42:39810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534852, "uuid": "24164dc5-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.207.26:35611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719534917, "uuid": "4abfb0c7-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.224.72:57296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535093, "uuid": "b3d354c3-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.188.28:46779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535149, "uuid": "d51767a9-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.12.176:35596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535149, "uuid": "d54f7b5e-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.47.247.67:42970/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535157, "uuid": "da172888-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.255.1:50580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535162, "uuid": "dd0ab941-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.116.180:40482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535211, "uuid": "fa0e7e40-34e6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.92:34317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535266, "uuid": "1aeb921a-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.117:42663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535266, "uuid": "1af34a35-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.169.235:41124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535326, "uuid": "3ee1d805-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.235:43474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535344, "uuid": "4930bafd-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.186.120:41600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535447, "uuid": "86b59ec5-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.88.219:51848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535510, "uuid": "ac8290f0-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.71:34938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535568, "uuid": "cea5e8bf-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.49.30:59542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535568, "uuid": "cee127e2-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.56.141:43347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535576, "uuid": "d3780529-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.28.182:44377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535595, "uuid": "df1d8f98-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.109.213:43144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535626, "uuid": "f1a2272b-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.142.147:49395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535642, "uuid": "fabc2601-34e7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.119:58269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535689, "uuid": "16fb9404-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.43.16:55054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535697, "uuid": "1c0ec2a2-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.93:45375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535745, "uuid": "3899f5fa-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.60.196:41323/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535746, "uuid": "38c8db15-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.63.19:49622/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535746, "uuid": "38eac4a8-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.143:55194/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535747, "uuid": "395d2777-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.128.23:39104/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535747, "uuid": "3973b302-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.233:41202/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535811, "uuid": "5ffb9d90-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.123.233:58595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535838, "uuid": "6fdbff09-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.190.167:37992/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719535927, "uuid": "a49cf901-34e8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.72:54279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536109, "uuid": "11a44b64-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.73.201:56175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536166, "uuid": "330e0def-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.45:33981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536228, "uuid": "58058e63-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.255:40818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536274, "uuid": "73b1ae03-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.213:53824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536287, "uuid": "7b321478-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.78.187:50727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536287, "uuid": "7b6bfea3-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.65.204:43917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536345, "uuid": "9dd6f7ca-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.x86_64", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536348, "uuid": "9fb2fde1-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.140:37372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536412, "uuid": "c5e3e236-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.196:49337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536412, "uuid": "c62782bb-34e9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.209.42:39810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536526, "uuid": "09dc4fbb-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.186.120:41600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536526, "uuid": "09f5eb0b-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.191:44027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536548, "uuid": "16ba343d-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.143:38167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536601, "uuid": "36c44f2a-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.186.185:35400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536646, "uuid": "5194928b-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.224.72:57296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536647, "uuid": "51d452f1-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.154.31.178:44393/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536647, "uuid": "5231af91-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.33:51859/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536715, "uuid": "7a45a844-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.126.212:52759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536743, "uuid": "8b1c63ff-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.153.190:42502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536766, "uuid": "9907bd27-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.188.28:46779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536766, "uuid": "99122a36-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.255.1:50580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719536773, "uuid": "9d20d54c-34ea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.141:47465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537012, "uuid": "2b97ebeb-34eb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.193:33027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537013, "uuid": "2c35ca22-34eb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.111.102.27:36475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537038, "uuid": "3b047d67-34eb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.15.61:39463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537126, "uuid": "6fc26ee2-34eb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.116.180:40482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537246, "uuid": "b7519c63-34eb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.10.72:60957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537367, "uuid": "ff1e617e-34eb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.72:54279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537426, "uuid": "227643b9-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.184.43:38521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537429, "uuid": "242f99e5-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.221.143:55436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537457, "uuid": "34c90c54-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.171.8:58771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537486, "uuid": "462d23e9-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.123.233:58595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537546, "uuid": "69e7c412-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.169.235:41124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537547, "uuid": "6a3462a0-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.47.122:50013/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537547, "uuid": "6a495e20-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.34.64:59215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537556, "uuid": "6fdc0256-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.75.183:41058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537620, "uuid": "95c6bcd1-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.143.221:43933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537621, "uuid": "969aac51-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.144.153:41179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537727, "uuid": "d58021b2-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.73.201:56175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537727, "uuid": "d583bf19-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.66.107:51599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537734, "uuid": "da09f2ee-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.242.255:33962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537741, "uuid": "dddde9ae-34ec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.9.237:53901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537910, "uuid": "430bb20c-34ed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.179.80:47845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537925, "uuid": "4ba5f362-34ed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.233:44639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537966, "uuid": "643facce-34ed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.65.204:43917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719537969, "uuid": "6643b361-34ed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.140:37372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538034, "uuid": "8caafdd2-34ed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.56.171.72:33895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538217, "uuid": "f9dcff59-34ed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.191:44027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538329, "uuid": "3c5e3e3f-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.126.212:52759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538340, "uuid": "43659d26-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.108.152:38199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538389, "uuid": "609407f1-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.186.185:35400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538417, "uuid": "71185c39-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.153.190:42502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538447, "uuid": "82edea15-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.29.41:58438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538453, "uuid": "86935c2c-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.15:34333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538512, "uuid": "a9da5261-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.15.61:39463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538526, "uuid": "b1e5d27b-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.85.139:33097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538573, "uuid": "cdce361d-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.87.46:33110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538577, "uuid": "d093f1a0-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.78.46:58527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538695, "uuid": "16c72bea-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.111.102.27:36475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538706, "uuid": "1d48d5d4-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.252.175:37279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538745, "uuid": "345f2e3d-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.205.174:44576/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538813, "uuid": "5cef0fe9-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.202.232:39971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538867, "uuid": "7cf9285e-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.171.8:58771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538927, "uuid": "a111183c-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.10.72:60957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538986, "uuid": "c477344a-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.75.183:41058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538987, "uuid": "c493f0fe-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.24.20:33020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538987, "uuid": "c4c990bd-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.253:36269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719538999, "uuid": "cba9652d-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.245.59:57452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539047, "uuid": "e841f499-34ef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.144.153:41179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539345, "uuid": "9a7112b3-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.66.107:51599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539345, "uuid": "9a71f59c-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.34.64:59215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539346, "uuid": "9b04a219-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.92.81:57789/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539350, "uuid": "9d3b579e-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.237.20:38361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539381, "uuid": "afdb6692-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.26.15:48905/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539410, "uuid": "c0ef2ffb-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.234.51:51769/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539468, "uuid": "e377af7b-34f0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.190.61:58980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539526, "uuid": "061bda89-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.88.238:58570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539527, "uuid": "06858fc9-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.14.105:51657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539614, "uuid": "3a8e7cd7-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.179.80:47845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539709, "uuid": "72ec5d4b-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.228.197:57090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539716, "uuid": "7765bd81-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.87.236:43731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539766, "uuid": "951e4b9f-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.253:39179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539766, "uuid": "9549fff3-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.140.86:38084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539770, "uuid": "9769f608-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.34.198.194:38625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539774, "uuid": "99f27c56-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.138.171:56695/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539778, "uuid": "9c1f0235-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.101.254:46747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539826, "uuid": "b89b272c-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.74.212:57307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539828, "uuid": "ba42d1d5-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.0.123:36024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719539946, "uuid": "00911474-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.108.152:38199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540021, "uuid": "2d3dd543-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.56.171.72:33895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540095, "uuid": "58f80a77-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.228.233:56914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540126, "uuid": "6bb41987-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.237.20:38361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540127, "uuid": "6bfd070a-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.66:53439/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540193, "uuid": "93a7055d-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.206:51024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540246, "uuid": "b309c9f1-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.238:44173/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540246, "uuid": "b3291435-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.9:56282/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540274, "uuid": "c3f19f4f-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.81.236:56646/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540310, "uuid": "d99b09c2-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.29.41:58438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540311, "uuid": "d9f8fbc6-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.85.139:33097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540312, "uuid": "dacf9088-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.52.216:55025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540366, "uuid": "facdf437-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.arm5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540370, "uuid": "fcdffc02-34f2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.252.175:37279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540427, "uuid": "1f215830-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.113.66:36285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540431, "uuid": "21af7e40-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.226.154:44925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540550, "uuid": "6855331d-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.104.199:47429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540611, "uuid": "8cd5a1a3-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.124.234:43587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540611, "uuid": "8d031525-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.253:36269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540612, "uuid": "8d4b6d0c-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.204:52073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540612, "uuid": "8da0e8a6-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.24.20:33020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540787, "uuid": "f5827875-34f3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.190.61:58980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540819, "uuid": "08d0b5e8-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.229:55429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540846, "uuid": "18b86e12-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.229.19:55630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540850, "uuid": "1b5ddecf-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.141.125:44324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719540911, "uuid": "3fa69745-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.88.238:58570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541033, "uuid": "882998d5-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.244.215:58991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541146, "uuid": "cb75810d-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.251:57577/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541146, "uuid": "cbb47e0d-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.90.49:33466/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541146, "uuid": "cbc79c5e-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.236.76:47352/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541158, "uuid": "d2f117cd-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.100:41320/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541212, "uuid": "f2ffb1d3-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.199:55104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541218, "uuid": "f67c757f-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.58:57422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541327, "uuid": "37733113-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.226.154:44925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541327, "uuid": "379105bd-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.108:45399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541334, "uuid": "3b8c41fb-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.134.182:54646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541448, "uuid": "7f988c74-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.240.34:39483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541451, "uuid": "812882a3-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.161.28:45899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541514, "uuid": "a723c6b6-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.209:46025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541628, "uuid": "eaac4bee-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.178.100:36326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541629, "uuid": "ebbe5ad3-34f5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.162.157:56269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541851, "uuid": "6fa3221c-34f6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.209.146:33771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541873, "uuid": "7d2950c8-34f6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.169:60986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719541933, "uuid": "a0aaaa91-34f6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.52.216:55025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542002, "uuid": "c9a72e2a-34f6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.68.94:59476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542052, "uuid": "e7cf838d-34f6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.14.20:45954/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542115, "uuid": "0d05b049-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.113.66:36285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542115, "uuid": "0d16ea8e-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.226.74:50464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542120, "uuid": "105a14ac-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.83.95:50145/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542201, "uuid": "40a7c3c5-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.211:41247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542228, "uuid": "50c9bfc8-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.28.57:49556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542233, "uuid": "5395ea69-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.155.241:46531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542288, "uuid": "7469516e-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.141.125:44324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542349, "uuid": "986b7917-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.82.87:40834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542351, "uuid": "99fa1e86-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.66:38114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542410, "uuid": "bd2be754-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.204:52073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542410, "uuid": "bd33297c-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.251:57577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542467, "uuid": "df22caa0-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.132:48109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542543, "uuid": "0c762dfd-34f8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.246:41137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542587, "uuid": "267ee1de-34f8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.190.161:49497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542766, "uuid": "91148c93-34f8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.244.215:58991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542886, "uuid": "d87da105-34f8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.155.241:46531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542896, "uuid": "de89c18c-34f8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.190.151:58655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719542962, "uuid": "05df7a25-34f9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.245:59413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543021, "uuid": "29746804-34f9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.139.114:37234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543128, "uuid": "68d589e2-34f9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.183.232:50565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543248, "uuid": "b07b8d46-34f9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.214:41398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543376, "uuid": "fcc2c6c1-34f9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.132:35348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543554, "uuid": "66dd521a-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.76:52245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543615, "uuid": "8b162ba8-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.68.94:59476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543666, "uuid": "a9b10872-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.56.252.252:46441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543671, "uuid": "acae2476-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.11.226:38004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543734, "uuid": "d269640b-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.249:35348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543735, "uuid": "d2ca98c4-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.170.210:55375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543786, "uuid": "f12e2983-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.31.159:59359/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543786, "uuid": "f15f1166-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.120:42349/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543787, "uuid": "f19f04a7-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.104.48.226:57362/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543787, "uuid": "f19fa4e5-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.177.17.119:37287/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543787, "uuid": "f1ae4b6a-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.39:45456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543791, "uuid": "f3eb274a-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.198:33010/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543794, "uuid": "f62de488-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.76.24:44102/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543815, "uuid": "027ae966-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.139.217:36282/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543819, "uuid": "04e99955-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.2.126:50692/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543835, "uuid": "0e78e8a9-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.226.146:46382/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543910, "uuid": "3aeed927-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.182.45:50068/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543917, "uuid": "3f61c793-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.126.25:49257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543930, "uuid": "46ebdaec-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.142.246:46693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543967, "uuid": "5cd2f367-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.162.157:56269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719543967, "uuid": "5cf6372d-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.12.216:44289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544028, "uuid": "813ce221-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.144.72:40232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544029, "uuid": "8200ac17-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.251:57577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544058, "uuid": "930c9363-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.246:42250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544060, "uuid": "946770ca-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.46.126:53702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544100, "uuid": "ac6d18cc-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.150.25:47262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544101, "uuid": "ad2cdd93-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.183.148:48243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544146, "uuid": "c7fef81d-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.246:41137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544179, "uuid": "db8176d9-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.47.61:59347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544327, "uuid": "3394856e-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.190.161:49497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544391, "uuid": "59a210bd-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.4.243.113:58247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544458, "uuid": "81ae2f41-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.91.199:52243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544471, "uuid": "893ef080-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.221.241:53050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544514, "uuid": "a3398d65-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.2.89:53611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544567, "uuid": "c285dd53-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.17.157:42775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544568, "uuid": "c33b2692-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.200:40536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544571, "uuid": "c53c42aa-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.87:54611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544626, "uuid": "e5a2e149-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.139.114:37234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544687, "uuid": "0a1d19d0-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.190.151:58655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544701, "uuid": "1287942e-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.221.143:53053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544746, "uuid": "2db202b2-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.42.32:48112/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544746, "uuid": "2db2088b-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.125.90:43320/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544831, "uuid": "60488a8a-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.73.112:44847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544927, "uuid": "996bcc9a-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.105.246:57533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544928, "uuid": "99a9467c-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.10:33722/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544931, "uuid": "9be8396d-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.222:40653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719544936, "uuid": "9e7fb553-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.217:41431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545046, "uuid": "e04cb818-34fd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.214:41398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545109, "uuid": "058e81ee-34fe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.132:35348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545227, "uuid": "4c0db1b0-34fe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.185:39674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545292, "uuid": "7290eda9-34fe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.133:37782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545470, "uuid": "dce10ccc-34fe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.50.5:59345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545470, "uuid": "dd2aa7e0-34fe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.129.124:44377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545470, "uuid": "dd37e1c2-34fe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.67:57056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545529, "uuid": "00362d15-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.39:45456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545538, "uuid": "05af01bd-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.193:35188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545649, "uuid": "475c3af3-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.185.87:50546/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545653, "uuid": "49f435fb-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.57.94:59656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545662, "uuid": "4f82568e-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.249.204:38734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545677, "uuid": "5826ec1e-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.144.72:40232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545713, "uuid": "6d86c59d-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.245:59413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545718, "uuid": "707fe19b-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.191:40181/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545718, "uuid": "709816ba-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.171:57333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545718, "uuid": "70c9f2c6-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.147.146:42114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545718, "uuid": "70d94d18-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.255.40:55348/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545767, "uuid": "8e284122-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.133:37782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545769, "uuid": "8efdc4bf-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.183.148:48243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545773, "uuid": "91440861-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.80.221:60244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545773, "uuid": "91b41434-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.182.254:44883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545775, "uuid": "92c5cf1e-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.107.60:35480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545887, "uuid": "d5743c9f-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.2.89:53611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545952, "uuid": "fc4ecbd2-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.84.123:35039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719545962, "uuid": "0207e940-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.48.176:56118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546072, "uuid": "43a223cb-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.182:54992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546080, "uuid": "4878a300-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.144.85:54167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546129, "uuid": "65bb97c2-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.235.215:55405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546185, "uuid": "870ae42c-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.17.157:42775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546185, "uuid": "87316691-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.222:40653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546185, "uuid": "873b4544-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.250.25:55205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546196, "uuid": "8da3b5d4-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.50.220:52265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546310, "uuid": "d1bc4257-3500-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.195.128:33316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546427, "uuid": "178a4b2e-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.148.236:55731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546487, "uuid": "3aede02b-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.217:41431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546545, "uuid": "5d6a324e-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://covid19help.top/obizz.doc", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546546, "uuid": "5e3de75a-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.83.95:50145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546546, "uuid": "5e51ff8d-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.16.26:37047/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546612, "uuid": "858d2ee8-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.234:55830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546727, "uuid": "ca367f1d-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.206.172:46857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546787, "uuid": "ee05a467-3501-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.172.243:53126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546845, "uuid": "10935c6c-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.129.124:44377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719546909, "uuid": "36a21e25-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.141.84:44388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547032, "uuid": "7fcd5d27-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.146.181:38970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547146, "uuid": "c3d353a4-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.57.94:59656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547212, "uuid": "eb1d53bd-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.13:50530/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547212, "uuid": "eb21d58b-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.50.5:59345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547212, "uuid": "eb5a04ab-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.76.190:53135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547224, "uuid": "f2ac7953-3502-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.15.226:46709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547276, "uuid": "114dbe40-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.114.31:50269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547281, "uuid": "143a1f62-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.60:34561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547327, "uuid": "2f8de881-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.107.60:35480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547327, "uuid": "2fc61ed5-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.80.221:60244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547331, "uuid": "32623cdb-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.218.135:36841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547340, "uuid": "37c9e560-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.177.151:42606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547446, "uuid": "767a8df4-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.147.146:42114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547457, "uuid": "7d1943e2-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.52.145:59745/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547540, "uuid": "ae88c7ea-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.202.171:54422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547566, "uuid": "be6eb883-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.164.14:40485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547570, "uuid": "c0a1bb53-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.235.90:49346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547635, "uuid": "e777eae2-3503-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.132.26:36749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547687, "uuid": "061865f4-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.182:54992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547694, "uuid": "0a5f80ed-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.166.196:42167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547703, "uuid": "102e3975-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.135.219:53064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547746, "uuid": "29acd895-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.235.215:55405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547750, "uuid": "2c37d7e9-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.46.155:41151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547754, "uuid": "2e485368-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.5.109:39009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547759, "uuid": "3134f3ec-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.95.52:46057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547843, "uuid": "63380bea-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.253:32781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547869, "uuid": "72bd605c-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.250.25:55205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547874, "uuid": "75ff4ea1-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.73.158:57602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547876, "uuid": "76f50ef3-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.150.111:43789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719547932, "uuid": "98a117f2-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.79:47925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548002, "uuid": "c1e71e33-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.250.127:39443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548051, "uuid": "df42fd49-3504-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.5.26.127:47548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548130, "uuid": "0e307e45-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.206.74:33144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548166, "uuid": "23c78842-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.83.95:50145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548226, "uuid": "47c819d3-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.48:37295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548287, "uuid": "6bf475fd-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.15.226:46709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548287, "uuid": "6c33011a-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.60:39504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548352, "uuid": "92fb866a-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.120.110:55231/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548353, "uuid": "9367ea1f-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.168.131:55614/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548411, "uuid": "b60e49c9-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.76.190:53135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548479, "uuid": "de3fab0e-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.56.174.37:36675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548527, "uuid": "fae09ddf-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.218.135:36841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548527, "uuid": "fb09c2c6-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.240.34:39483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548530, "uuid": "fca20954-3505-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.100:59267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548594, "uuid": "23183730-3506-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.145.229:36874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548599, "uuid": "2632ea26-3506-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.173.30:60313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548661, "uuid": "4aa91937-3506-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.151:60304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548711, "uuid": "68b737fb-3506-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.185.140.219:41231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548718, "uuid": "6c9da60b-3506-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.255.2:33836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719548888, "uuid": "d278e9d3-3506-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.5.109:39009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549022, "uuid": "2239df25-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.7.218:51805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549071, "uuid": "3f94065b-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://covid19help.top/wordpad.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549074, "uuid": "40faa246-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.60:34561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549074, "uuid": "414fb9f2-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.202.171:54422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549133, "uuid": "6415639c-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.9:42737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549133, "uuid": "6416b9a3-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.162.161:36354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549135, "uuid": "652bf13d-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.228.57:33822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549143, "uuid": "6a121f51-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.249.148:41252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549190, "uuid": "86787d2b-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.164.14:40485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549250, "uuid": "aa376911-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.97.62:53638/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549266, "uuid": "b38ed458-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.182.72:52225/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549314, "uuid": "d0681e72-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.147.44:56954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549372, "uuid": "f2cd255c-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.135.219:53064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549373, "uuid": "f394d303-3507-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.66:35030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549402, "uuid": "0485e219-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.181.55:55406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549405, "uuid": "06341e84-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.72:38692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549489, "uuid": "383ab6ef-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.46.4:51107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549549, "uuid": "5bff6d2a-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.117.32:56330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549553, "uuid": "5e9d3dea-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.190.205:48543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549554, "uuid": "5f05c215-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.252:47037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549621, "uuid": "8745b05d-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.79:47925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549668, "uuid": "a32394c3-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.235.90:49346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549787, "uuid": "ea287da0-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.250.127:39443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549787, "uuid": "ea4005fc-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.146.181:38970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549790, "uuid": "ebd21fcd-3508-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.239.203:57091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549924, "uuid": "3bb89b0f-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.113:38044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549966, "uuid": "54e43ec2-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.129:33793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549967, "uuid": "556b88ea-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.208.22:54546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549970, "uuid": "57288be5-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.24:39563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719549981, "uuid": "5d8ea676-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.71.193:33795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550026, "uuid": "78a809c7-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.41.227:50525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550026, "uuid": "78a960ed-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.81.18:43550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550026, "uuid": "78ad9aa9-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.151:60304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550038, "uuid": "7f979bb1-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.108.75:44277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550147, "uuid": "c0cf520f-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.200.140:38210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550148, "uuid": "c161d96b-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.40.168:42215/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550155, "uuid": "c57f7b45-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.35.214:35474/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550164, "uuid": "cae89e9d-3509-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.130.26:37595/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550387, "uuid": "4fb66bf8-350a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.164.167:33299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550394, "uuid": "54101864-350a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.9:42737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550568, "uuid": "bb512007-350a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.240.226:57291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550692, "uuid": "05514510-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.170.123:33771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550746, "uuid": "25989a5d-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.7.218:51805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550764, "uuid": "3043a7cf-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.90.178:37460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550812, "uuid": "4d150d8a-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.228.57:33822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550812, "uuid": "4d190c5b-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.172:60206/mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550927, "uuid": "919b9cc0-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.147.44:56954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550930, "uuid": "931e92fa-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.164.158:37217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719550930, "uuid": "933d4d08-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.85:47862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551047, "uuid": "d8d4c881-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.189.82.125:51670/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551054, "uuid": "dd0afd9a-350b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.242.120:47181/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551114, "uuid": "00d2881d-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.29.207:45599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551114, "uuid": "014fcece-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.106.143:53097/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551117, "uuid": "02b9d902-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.76.134:59801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551226, "uuid": "44111d5a-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.53.104:50071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551227, "uuid": "4439d13b-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.60.203:43767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551231, "uuid": "46b599fa-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.233.47:50213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551231, "uuid": "46e33afe-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.54.230:39097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551292, "uuid": "6b072e1f-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.8.85:57650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551347, "uuid": "8bbeeba6-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.21.1:46336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551349, "uuid": "8d222ab4-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.163.201:48513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551468, "uuid": "d3e5f484-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.240.68.109:40348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551531, "uuid": "f955216b-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.236.228:41553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551531, "uuid": "f9565387-350c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.182:47948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551586, "uuid": "1a9913ad-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.115:50474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551587, "uuid": "1ac266d9-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.170:60296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551596, "uuid": "204dd2f9-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.94.226:57747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551596, "uuid": "205e4733-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.74.180:53524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551647, "uuid": "3f0023bf-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.99.45:51434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551651, "uuid": "41183b2c-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.155.202.192:40583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551711, "uuid": "64f86850-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.84:60284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551711, "uuid": "65249970-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.117.113:40354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551827, "uuid": "a9fad3d7-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.132:48109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551888, "uuid": "ce3fa523-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.84.200:50571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551901, "uuid": "d5ec8b81-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.47.121:32978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551902, "uuid": "d6fefb44-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.176:53444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551906, "uuid": "d9143d52-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.22.174:45854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551946, "uuid": "f1177cc8-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.190.161:49497/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551947, "uuid": "f14e0f7e-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.164.167:33299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551947, "uuid": "f1696bd3-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.85:56111/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719551958, "uuid": "f8324036-350d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.112.164:45831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552206, "uuid": "8bf1d390-350e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.88.83:49638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "a3b035ef-350e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://malayska.ug/asdf.EXE", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "a3b55718-350e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://malayska.ug/native.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "a3b7afa7-350e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://malayska.ug/ghjkl.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "a3b9c9d7-350e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://malayska.ug/net.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552246, "uuid": "a3dd16e2-350e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://malayska.ug/asdfg.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552432, "uuid": "12a409e0-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.215.171:47778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552453, "uuid": "1f4c96fc-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.49.120:56727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552617, "uuid": "80d071ea-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.163.201:48513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552619, "uuid": "81fe522b-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.61:34039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552619, "uuid": "82568177-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.152.202:52709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552672, "uuid": "a1693044-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.123:44147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552674, "uuid": "a32543e9-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.164.158:37217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552687, "uuid": "aa99138d-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.76.134:59801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552732, "uuid": "c5523a94-350f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.80:35813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552848, "uuid": "0ada6867-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.23.195.138:58252/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552849, "uuid": "0b179a3c-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.21.1:46336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552850, "uuid": "0b8737c8-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.169.148:37727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552917, "uuid": "33f9b75a-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.228.13:60434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552922, "uuid": "36ae8896-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.21.127:53915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719552984, "uuid": "5b8e47bf-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.60.203:43767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553029, "uuid": "76633be7-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.152.196:33444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553033, "uuid": "7908c454-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.188.79:22521/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553168, "uuid": "c98d2152-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.122.179:35327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553210, "uuid": "e27c0596-3510-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.236.228:41553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553269, "uuid": "05ceb8ff-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.170:60296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553326, "uuid": "2754bb61-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.117.113:40354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553326, "uuid": "27b1887c-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.94.226:57747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553343, "uuid": "31b6bb7f-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.208.139:45582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553446, "uuid": "6f10255b-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.99.45:51434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553582, "uuid": "bfd89331-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.79:54472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553630, "uuid": "dc6a72c5-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.84:60284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553654, "uuid": "eb0c64a0-3511-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.176:53444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553754, "uuid": "26bb52dc-3512-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.229.204:47874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553757, "uuid": "28844514-3512-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.107.131:60149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719553759, "uuid": "2969c792-3512-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.150:37600/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554063, "uuid": "ded47d3f-3512-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.4:55780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554108, "uuid": "f9d1cce0-3512-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.3.86:52355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554166, "uuid": "1c5a3893-3513-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.58.214.125:10983/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554226, "uuid": "3ff7ee80-3513-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.215.171:47778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554285, "uuid": "63351a11-3513-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.61:34039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554306, "uuid": "6f60c35e-3513-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.8:40770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554413, "uuid": "af5b4bf7-3513-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.80:35813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554586, "uuid": "1675e541-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.230.28.6:35819/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554587, "uuid": "16e445ba-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.243.29.221:44753/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554587, "uuid": "1723e66c-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.9.203:37307/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554587, "uuid": "1726dff4-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.0.223:51200/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554588, "uuid": "17928b5a-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.44.107.141:41659/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554588, "uuid": "17948483-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.7.94:43245/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554588, "uuid": "1794c9c3-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.198.78:56109/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554588, "uuid": "17d5a092-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.85:55909/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554591, "uuid": "19c40dd1-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.104.60:43597/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554596, "uuid": "1cbddc02-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.119.163:57885/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554597, "uuid": "1d58d7c3-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.208:39708/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554603, "uuid": "20d0ba43-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.255.177:52198/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554610, "uuid": "24cba375-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.187.122:47560/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554615, "uuid": "27af53b9-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.45:53365/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554619, "uuid": "2a553393-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.68.54:46061/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554646, "uuid": "3a7572fb-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.228.13:60434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554646, "uuid": "3a8849cd-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.12:59459/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554647, "uuid": "3ab4cb03-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.169.148:37727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554647, "uuid": "3b0777de-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.22.174:45854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554710, "uuid": "60b6dd33-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.150.253:37431/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554712, "uuid": "61ba93da-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.42.173:48991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554827, "uuid": "a6366b0f-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.122.179:35327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554836, "uuid": "abb65750-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.213.158:59442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554887, "uuid": "c9d0d9d7-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.48.185:48688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554888, "uuid": "ca623f66-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.147.87:38279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554894, "uuid": "cdee0ba8-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.181:51324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554946, "uuid": "ed0bcad7-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.223.33.46:41725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719554946, "uuid": "ed0ec1f2-3514-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.152.196:33444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555194, "uuid": "80ccd820-3515-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.127.176:47510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555317, "uuid": "ca08df44-3515-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.29.54:33187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555367, "uuid": "e82caad6-3515-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.229.204:47874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555371, "uuid": "ea7fb5b9-3515-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.213.92:35164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555428, "uuid": "0c4a5446-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.118:32963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555435, "uuid": "106d8b56-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.202.103:60986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555443, "uuid": "150bee7c-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.27.80:51297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555493, "uuid": "332d074a-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.79:54472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555548, "uuid": "5410f014-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.227.209:40967/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555551, "uuid": "5590ba05-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.250:42850/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555726, "uuid": "be061a0a-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.3.86:52355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555728, "uuid": "bf423ea1-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.22.170:52219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555801, "uuid": "ea973d8d-3516-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.58:42649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719555924, "uuid": "34433daa-3517-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.159.250:56280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556035, "uuid": "765ef8d7-3517-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.185.82:37931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556091, "uuid": "97692b78-3517-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.42.240:40819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556146, "uuid": "b810e40f-3517-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.42.173:48991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556148, "uuid": "b95d3884-3517-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.42.54.216:45794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556150, "uuid": "badee445-3517-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.157.87:37313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556288, "uuid": "0cb494fa-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.117.231:60948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556450, "uuid": "6da00673-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.102:35423/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556531, "uuid": "9df9dd43-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.251.134:53602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556570, "uuid": "b51dee54-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.48.185:48688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556571, "uuid": "b588e504-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.240.218:39754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556571, "uuid": "b5b1353b-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.78:35321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556579, "uuid": "ba56c852-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.41:35742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556691, "uuid": "fd631bb2-3518-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.147.87:38279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556815, "uuid": "47093166-3519-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.62.124:34847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556817, "uuid": "486bd3ad-3519-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.50:53123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556927, "uuid": "89bb053b-3519-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.27.80:51297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719556987, "uuid": "ad7aa0d5-3519-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.29.54:33187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557052, "uuid": "d419f6c4-3519-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.72:47031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557052, "uuid": "d46499e7-3519-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.168.142:40338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557127, "uuid": "011579e3-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.37.131:42529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557169, "uuid": "19ffe0bd-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.228:45345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557225, "uuid": "3bbd502f-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://covid19help.top/damian.doc", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557226, "uuid": "3c532aa0-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.m68k", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#feb320", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557226, "uuid": "3c5533bf-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.arm", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "3c91bd6b-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.ppc", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "3c960354-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.mips", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557227, "uuid": "3cb153f8-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.arm7", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557232, "uuid": "3f714658-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.47.120:36320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557286, "uuid": "5fce8ce4-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.spc", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557286, "uuid": "5fcfa93a-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.mpsl", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557287, "uuid": "609e58c1-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.118:32963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557320, "uuid": "7443bcf4-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.11.106:42956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557352, "uuid": "873cf3c7-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.160.62/leadiadequatepro.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557352, "uuid": "874d33e5-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.160.62/pclient.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557356, "uuid": "8975001f-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.160.62/sapsan.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557408, "uuid": "a8c5ddf3-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.224.153/sarm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557408, "uuid": "a8ce4c8e-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.224.153/sarm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557409, "uuid": "a92bb713-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-232-175-155.ip.linodeusercontent.com/88122/flowersarebautifulforeveryonegraden.gif", "Tag": [ { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557411, "uuid": "aa268cc7-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-105-66-118.ip.linodeusercontent.com/payloads/dmshell.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557413, "uuid": "aba3f7e7-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://shell.dimitrimedia.com/payloads/dmshell.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557413, "uuid": "abadebfe-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-105-66-118.ip.linodeusercontent.com/payloads/payload.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557413, "uuid": "abbe9dbf-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://shell.dimitrimedia.com/payloads/payload.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557415, "uuid": "acac5cd9-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-232-175-155.ip.linodeusercontent.com/88122/bh/bh.h.h.h.hhhhh.doC", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557419, "uuid": "af65330f-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-232-175-155.ip.linodeusercontent.com/88122/WERD.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557420, "uuid": "af7dcc0d-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://contur2fa.recipeupdates.rest/__hh/files/run", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557420, "uuid": "afccdb70-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://contur2fa.recipeupdates.rest/__hh/files/run_search", "Tag": [ { "name": "crypto", "colour": "#b9489c", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false }, { "name": "targeted", "colour": "#2e2e9c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557423, "uuid": "b17bbf8a-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.233.129.144/ffucore.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557423, "uuid": "b1c4143c-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.137/5.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557426, "uuid": "b36a8647-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.91.64.58/nvsmartmax.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557428, "uuid": "b42ff63a-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://progressivebangladesh.org/server3/AppGate2103v0115.exe", "Tag": [ { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557430, "uuid": "b57cd58f-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.137/3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557441, "uuid": "bc4baede-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://article.se/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557441, "uuid": "bc56cf96-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173-255-238-129.ip.linodeusercontent.com/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557441, "uuid": "bc73dfc4-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://v1.article.se/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557442, "uuid": "bc8933ab-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://article.se/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557442, "uuid": "bc99326e-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://v1.article.se/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557526, "uuid": "eed564dc-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.22.170:52219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557526, "uuid": "eef10069-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.42.240:40819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557535, "uuid": "f460dd1b-351a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lsrael.today/fuck.exe", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557584, "uuid": "119deea0-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://covid19help.top/loudb.doc", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "11fbd620-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.x86_64nosl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "1236ac6c-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/c.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557585, "uuid": "124feeed-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/bins/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557586, "uuid": "12b13651-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.168.142:40338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557587, "uuid": "132b824f-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.238:54841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557647, "uuid": "3724f65e-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.197.249:48137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557680, "uuid": "4aa4c342-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.121.227:56953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557714, "uuid": "5f095acb-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.250.27:48256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719557767, "uuid": "7e565278-351b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.185.82:37931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558012, "uuid": "10c11548-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://register-agov.com/AGOV-Access.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558013, "uuid": "111689bb-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://agov-ch.net/AGOV-Access.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558013, "uuid": "11192d1c-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://agov-access.net/AGOV-Access.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558013, "uuid": "11193177-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://agov-ch.com/AGOV-Access.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558013, "uuid": "1130e1fe-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.176.172:55180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558246, "uuid": "9c253e82-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.240.218:39754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558246, "uuid": "9c2a8ee9-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://agov-access.com/AGOV-Access.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558252, "uuid": "9fba4e75-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.141.249:38817/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558256, "uuid": "a22dac1d-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://137.59.195.86:57534/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558275, "uuid": "ad5c754b-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.211.238:38468/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558308, "uuid": "c0ff6382-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.119.20:40120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558309, "uuid": "c18f8474-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.78:35321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558313, "uuid": "c43dc856-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.120.127/xampp/wrf/IEnetCache.hta", "Tag": [ { "name": "connected to meduza stealer", "colour": "#d8708d", "exportable": true, "hide_tag": false }, { "name": "cve-2017-0199", "colour": "#8fbfdc", "exportable": true, "hide_tag": false }, { "name": "exploit", "colour": "#78a9b4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558365, "uuid": "e322d3f2-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.62.124:34847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558366, "uuid": "e35ef945-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.103.41:37507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558380, "uuid": "ebefb989-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.154.153:46945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558385, "uuid": "eebc6a6b-351c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.179.50:60669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558488, "uuid": "2c3c03ad-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.252:47037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558616, "uuid": "789e4efa-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.60.117:40265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558666, "uuid": "969489c0-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.176.172:55180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdc410fb-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Zhdewuo.vdf", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdc75696-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Qffwif.vdf", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdc76448-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Qhkycsh.vdf", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdca8876-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Cbiqmixy.dat", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdca89ca-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Sgkim.vdf", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdca8e0c-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Dqywnsdwoy.dat", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558732, "uuid": "bdd169ce-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Mevykiryg.dat", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558733, "uuid": "be0cac9e-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Omrtovhgk.vdf", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558733, "uuid": "be9aa362-351d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lenscommunity.za.com/Fpdain.vdf", "Tag": [ { "name": "265e091ffeb34fdc48b53f433c7434f230891cb8b82f758cd570c8b070ae", "colour": "#d10e13", "exportable": true, "hide_tag": false }, { "name": "after-malicious-dl-", "colour": "#2bc555", "exportable": true, "hide_tag": false }, { "name": "http-requests", "colour": "#0e9d96", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558852, "uuid": "05385ca9-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.89:58884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558916, "uuid": "2b61a344-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.219.197:52346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558923, "uuid": "2fc33ec0-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://eletricarissi.com.br/Wrulnnknf.dat", "Tag": [ { "name": "http-request-to-.dat_file", "colour": "#c21f20", "exportable": true, "hide_tag": false }, { "name": "trojan.msil", "colour": "#9b450e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719558966, "uuid": "48ee706f-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.72:47031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559030, "uuid": "6f6609ae-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.168.175:38128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559058, "uuid": "80313739-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.78.134:40151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559152, "uuid": "b814b8ac-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.120:48897/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559152, "uuid": "b81ae5ab-351e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.146.183:33256/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559295, "uuid": "0d524eb4-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.216.253:46448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559299, "uuid": "0fe3eaf9-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.166:55930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559326, "uuid": "1f7838bc-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.250.27:48256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559326, "uuid": "1fe732df-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.238:54841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559394, "uuid": "48204f04-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.148.205:34047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559513, "uuid": "8f787ef1-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.86.129:40925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559578, "uuid": "b5df78ee-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.52:57862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559625, "uuid": "d1ddcb22-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.35:59074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559630, "uuid": "d4f1c7cb-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop.aishabaker.com/about/", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559669, "uuid": "ec0c2ad8-351f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.15.86:43006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559747, "uuid": "1a938dd2-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.168:57497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559756, "uuid": "1fe1f15b-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.20:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559815, "uuid": "42f1951e-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.251.134:53602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559815, "uuid": "43150104-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.120.127/T2706F/lsass.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719559815, "uuid": "4316b197-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.222.233:59639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560047, "uuid": "cdbdfee2-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.179.50:60669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560051, "uuid": "cfbf053d-3520-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.118.234:42112/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560167, "uuid": "14f7d733-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.247:44857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560170, "uuid": "170cc620-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.224.224:39465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560226, "uuid": "38080715-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://lsrael.today/Serverssss.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560286, "uuid": "5be99d82-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.154.153:46945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560347, "uuid": "805c9546-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.219.197:52346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560360, "uuid": "881cb9c4-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.191.193:60605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560409, "uuid": "a4fcfa69-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.222.233:59639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560473, "uuid": "cb3becf9-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.89:58884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560525, "uuid": "ea8dcb6a-3521-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.168.175:38128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560645, "uuid": "323b5e77-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.103.41:37507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560646, "uuid": "326fbe78-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.11.106:42956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560651, "uuid": "357f795e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.132.160:39669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560708, "uuid": "577f2086-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.120.230.115:43035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560710, "uuid": "58a536a2-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnfjdbhgo.duckdns.org/byfronbypass.html/css/mss/hirimiy.exe", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560710, "uuid": "58b20bc0-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnfjdbhgo.duckdns.org/byfronbypass.html/css/mss/j", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560710, "uuid": "58bdf3dc-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnfjdbhgo.duckdns.org/byfronbypass.html/css/mss/e", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560711, "uuid": "592f76b7-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnfjdbhgo.duckdns.org/byfronbypass.html/css/mss/Arzgohi.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560713, "uuid": "5a9a933e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.240:54213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560766, "uuid": "7a0e78ef-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://juytlioojbni.duckdns.org/byfronbypass.html/css/mss/e", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560766, "uuid": "7a50427a-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://juytlioojbni.duckdns.org/byfronbypass.html/css/mss/j", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560767, "uuid": "7ab1530d-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://juytlioojbni.duckdns.org/byfronbypass.html/css/mss/hirimiy.exe", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560768, "uuid": "7afd8538-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://juytlioojbni.duckdns.org/byfronbypass.html/css/mss/Arzgohi.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560830, "uuid": "a06da5a4-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/possibleintranet.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560833, "uuid": "a1d8e57e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/cultureeyestrain.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560833, "uuid": "a1f84454-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/guessadvance.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560833, "uuid": "a1f9454a-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/bothanalysts.exe", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560833, "uuid": "a204046e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/easyengineeringpro.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560843, "uuid": "a7baa23a-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Qpalzfiwkt.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560844, "uuid": "a87653c6-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Mkjnmpyosd.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560848, "uuid": "aad4c69b-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/requireprojectionspro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560850, "uuid": "abf4e15c-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/cultureeyestrainpro.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560850, "uuid": "ac174e85-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Hexcoykrkk.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "aca4b72f-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Pdzjousbvfb.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "acdcf680-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Wgqql.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560851, "uuid": "ace1499d-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Jyoghunmjo.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560852, "uuid": "ad778b34-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Drmxrcdcwvb.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560853, "uuid": "ada9d573-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Bsebx.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560853, "uuid": "adab588f-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Xlditxaszi.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "ae74f590-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/forest.jpeg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "ae753c1a-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/resultconcentrate.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "ae755155-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Opswnydpk.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "ae7a1f55-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Ddetwlxvlfw.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "aecb8275-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Yuyoh.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560854, "uuid": "aecbf6fe-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/comeprojectpro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "aef62806-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Ihvsyvkfmql.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "aef6e317-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Vjhzmhpr.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "af01d0cc-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Dcopku.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "af14c6b4-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Zfhintpb.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "af14fd29-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Byigbcnasp.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560855, "uuid": "af620663-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Doxfgqci.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560856, "uuid": "af795c06-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/onsufficient.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560856, "uuid": "af82585c-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Ldsxuzmdm.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560857, "uuid": "b026f264-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/aloneinstructionpro.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560857, "uuid": "b0288f00-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/Afgnwlnvsr.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560862, "uuid": "b3020527-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/wifeplan.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560862, "uuid": "b349d887-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.96/forest/opportunitymobilepro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560887, "uuid": "c21cc06e-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.148.205:34047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560947, "uuid": "e61044ab-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.166:55930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560954, "uuid": "ea07ef40-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Rgdzpmpouv.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560955, "uuid": "ea86c78a-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Czyituqtdv.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "ebc375df-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Nfrecpxqyd.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560957, "uuid": "ec367cfc-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Yismdlcl.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "ec3a2eff-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Qdgfx.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "ec9acb3d-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Vycpmxn.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560958, "uuid": "ecc61eec-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Vpziqnq.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "ed1a6ed9-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Fwivw.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "ed1dbe35-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Nruustyqoi.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "ed20b7fa-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Oujxajpkc.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "ed219302-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/Uoqhwzhx.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560959, "uuid": "ed3375f7-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/forest.jpeg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719560963, "uuid": "efb62620-3522-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.117/forest/theyleadershippro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561068, "uuid": "2e3eabaa-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.20:44314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561074, "uuid": "31ed1a12-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Jnvfdu.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561074, "uuid": "31ef7ca9-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Ieflfaupu.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561076, "uuid": "32e72446-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.52:57862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561077, "uuid": "33a9be32-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Fuldlidjhnv.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561078, "uuid": "33df8aa2-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Rfphkejsamg.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561078, "uuid": "340cf662-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Vzmuk.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561078, "uuid": "3433f196-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/listsystem.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561079, "uuid": "34eba25a-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Utolrh.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561079, "uuid": "34ec14a0-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/listsystemm.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561080, "uuid": "3516c15b-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Xuvmapjom.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561083, "uuid": "372b9dfa-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Kfmpup.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561083, "uuid": "372c68b8-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/stockperform.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561084, "uuid": "37bcd8b5-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Levjjat.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561096, "uuid": "3eeffd29-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/forest.jpeg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561107, "uuid": "4586bec6-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Gafyfcj.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561108, "uuid": "45a64829-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Udjkojk.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561108, "uuid": "45a7a1fb-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/revealtechnologicalpro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561108, "uuid": "45bab4f2-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Iwblphums.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561109, "uuid": "463c898b-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/sevenlevel.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561109, "uuid": "463cbc7b-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/whetherstatisticpro.zip", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561109, "uuid": "463cbfd7-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Tjyvzi.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561109, "uuid": "4672a6ff-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/backresourcepro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561109, "uuid": "469511d9-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/stockperformpro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561109, "uuid": "46b280d9-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/Uwmiatiohc.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561110, "uuid": "46ee697b-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/prettyprocesspro.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561123, "uuid": "4eca5c98-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.208.87.79/farm/FindCommunication.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561188, "uuid": "759235c3-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.249.20.110/wow/Apep_7.3.5.26365.exe", "Tag": [ { "name": "jaik", "colour": "#b14a17", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561195, "uuid": "79a7e3fd-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.222.5.64:32428/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561203, "uuid": "7e8e3006-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.155:58962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561246, "uuid": "98080d85-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.95.245:47292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561246, "uuid": "9814f57c-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.35:59074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561310, "uuid": "be249589-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.135.155/W2606T/csrss.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561313, "uuid": "bffc4702-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.82.178:58303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561315, "uuid": "c130278d-3523-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.44.207:33609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561676, "uuid": "98bf208a-3524-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.194.169:44452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561727, "uuid": "b70def18-3524-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.74.184:52572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561855, "uuid": "0340eac9-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lnkz.at/FG63g", "Tag": [ { "name": "Malicious_Doc", "colour": "#bb9e5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561855, "uuid": "0341e93c-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lnkz.at/cSHql", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561861, "uuid": "0696aea7-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.202:37828/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561864, "uuid": "08437f76-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.162.91:43292/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561912, "uuid": "253f90b0-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.208.240.51:36891/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719561914, "uuid": "266c0370-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.132:58769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562026, "uuid": "694b3ad4-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://93.123.12.248/xampp/Adrp/a/ae.e.e.e.eee.doc", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562147, "uuid": "b1232c08-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.109.111.183:37157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562151, "uuid": "b38f6130-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.154.160:50937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562269, "uuid": "f9ffa998-3525-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/RgwiL", "Tag": [ { "name": "stager", "colour": "#29337d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562328, "uuid": "1d091783-3526-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.191.193:60605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562386, "uuid": "3f699363-3526-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.120.230.115:43035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562520, "uuid": "8f689f63-3526-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.55.224:50544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562574, "uuid": "afb61e42-3526-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.229:54634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562694, "uuid": "f725a2e6-3526-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.79.201:37434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562722, "uuid": "07a7c8af-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.35.30:58283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562748, "uuid": "17411747-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.240:54213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562748, "uuid": "175c729a-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.44.207:33609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562749, "uuid": "1843fcd9-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.12.248/xampp/Adrp/Adrp.txt", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562753, "uuid": "1a823059-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.30:59812/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562760, "uuid": "1e56a1d0-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://midiamarketing.com.br/wp-includes/uu/Kqvhhvcga.vdf", "Tag": [ { "name": "infected-wordpress?", "colour": "#1d69bc", "exportable": true, "hide_tag": false }, { "name": "vdf.file", "colour": "#f83315", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562775, "uuid": "27cca6d9-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.215.11:50573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562822, "uuid": "436be543-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.116:35222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562874, "uuid": "628318e4-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.72.66:43833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562882, "uuid": "6739e641-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.188:49571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562933, "uuid": "85d3741b-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://uploaddeimagens.com.br/images/004/805/162/original/new_image_(1).jpg?1719495498", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562993, "uuid": "a9609607-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.161.0.102:50800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719562995, "uuid": "aa8d2f0c-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.12.127:59374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563003, "uuid": "af4a324e-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.174.94:48770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563047, "uuid": "c964f9a0-3527-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.239.240:49350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563228, "uuid": "357d2a01-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://managermagnetcccccmango.duckdns.org/se.e.e.e.eee.doc", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563231, "uuid": "375f8964-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.246:46887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563345, "uuid": "7b785ae5-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.132:58769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563348, "uuid": "7cdb82bc-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.178.144/baze644444444444444444444444.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563418, "uuid": "a6d3abde-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.194.169:44452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563419, "uuid": "a7601894-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.156.101.11:35331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563565, "uuid": "fe8794fa-3528-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.206.235:56762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563588, "uuid": "0c296949-3529-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.90:41385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563647, "uuid": "2f0da4b1-3529-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.182.142:47114/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563661, "uuid": "37dd14a6-3529-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.151:55520/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563770, "uuid": "78c1a20a-3529-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.15.8:54160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719563779, "uuid": "7e3eeeb1-3529-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.191.103:49267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564068, "uuid": "2a3b0a33-352a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.142:36918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564136, "uuid": "53064bf9-352a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.110:56948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564188, "uuid": "718a652e-352a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.17.168:39446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564246, "uuid": "9411e086-352a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.89.251.86:44639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564489, "uuid": "24e01694-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.79.201:37434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564546, "uuid": "475faf23-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.161.0.102:50800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564547, "uuid": "478a98bf-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.0.64:48162/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564611, "uuid": "6dc9d7c0-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.110.64:46030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564612, "uuid": "6e93bfdd-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.188:49571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564614, "uuid": "6f8af499-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.180:55877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564616, "uuid": "7103e15d-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.87.192:59857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564629, "uuid": "78c0effd-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.159.137:54266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564668, "uuid": "900452a6-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.229:54634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564669, "uuid": "9050a7df-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.115.246:48100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564727, "uuid": "b2c96de0-352b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.168:57497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564862, "uuid": "03bdbd36-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.4:58677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564871, "uuid": "091a2025-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.170.135:43535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564909, "uuid": "1f5fd168-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.239.240:49350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719564912, "uuid": "210b0988-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.54.59:55370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565267, "uuid": "f4da381f-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://lsrael.today//Serverssss.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565268, "uuid": "f58c0897-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://lsrael.today//fuck.exe", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565283, "uuid": "fe7c0052-352c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.247.52:39160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565328, "uuid": "191afcf5-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://lsrael.today/svchost.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565328, "uuid": "191ceb6f-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.52.145:59745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565332, "uuid": "1bd4f5ed-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.28.42:51683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565386, "uuid": "3be8d80b-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.161:55499/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565387, "uuid": "3c8afd34-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.63.254:54954/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565387, "uuid": "3caba645-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.14.105:51657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565390, "uuid": "3e3ccbde-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.151:51260/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565395, "uuid": "41331268-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.20:43399/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565403, "uuid": "460229de-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.185.171:59223/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565404, "uuid": "466e6e38-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.183.157:37949/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565406, "uuid": "47c4ab34-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.156:54175/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565420, "uuid": "4ffa11a6-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.77.225.194:53928/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565423, "uuid": "51c3fb6a-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.246.195.190:49381/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565423, "uuid": "51c9c370-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.2.214:53089/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565446, "uuid": "5fd15f5d-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.97.154:38734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565447, "uuid": "5ff3c998-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.4:58677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565452, "uuid": "62f14700-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.45:40603/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565642, "uuid": "d47b3fc7-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.206.235:56762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565687, "uuid": "ef3fb086-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.158.161.51:43619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565690, "uuid": "f13b0662-352d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.77:47562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719565987, "uuid": "a215dcd6-352e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.89.251.86:44639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566111, "uuid": "ebdb08b1-352e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.159.137:54266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566169, "uuid": "0e53243d-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.110.64:46030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566170, "uuid": "0edc3bc7-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.66:35030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566182, "uuid": "165e84be-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.49.219:45459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566286, "uuid": "54351786-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.115.246:48100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566348, "uuid": "790aeb00-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.118.11:48528/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566411, "uuid": "9efe515a-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.177.68:41410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566411, "uuid": "9efe81d1-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.246:46887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566412, "uuid": "9f81e4d3-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.47.174:53184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566467, "uuid": "c00be5d0-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.46.208:48889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566467, "uuid": "c014531d-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.52.145:59745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566472, "uuid": "c33f0d82-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.104.250:45100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566525, "uuid": "e2fc6857-352f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.17.168:39446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566650, "uuid": "2cf9ff65-3530-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.93:43649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566711, "uuid": "514ff416-3530-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.54.59:55370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719566780, "uuid": "7a958cc0-3530-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.71.156:57229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567015, "uuid": "06f3c03f-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.97.154:38734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567248, "uuid": "91dcfa06-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.70:51658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567249, "uuid": "922c332f-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.139.114:37234/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567249, "uuid": "925734c6-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.22.134:37504/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567262, "uuid": "9a1cd2b9-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.148.120:46032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567266, "uuid": "9c7d52fa-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.247.123:35184/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567368, "uuid": "d929be0e-3531-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.158.161.51:43619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567492, "uuid": "22cb10cf-3532-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.2:57387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567611, "uuid": "6a1a27eb-3532-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.93:43649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567673, "uuid": "8ed8bf32-3532-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.30:53300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567730, "uuid": "b0be074e-3532-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.119:45903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567739, "uuid": "b670960d-3532-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.26.169:46144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567847, "uuid": "f6bd4235-3532-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.120:45910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567968, "uuid": "3f166c5a-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.202.77:48531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719567984, "uuid": "485efb7e-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.188.10:55743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568027, "uuid": "61b57d9f-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.119:41491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568085, "uuid": "84c8e171-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.104.250:45100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568086, "uuid": "84e36345-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.199:55104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568157, "uuid": "af4351a8-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.2:35117/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568171, "uuid": "b8065bd2-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.55.127:47402/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568266, "uuid": "f074bb4d-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.139:33392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568269, "uuid": "f1f93cdf-3533-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.47.174:53184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568507, "uuid": "804d9231-3534-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.46.208:48889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568512, "uuid": "832b451c-3534-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.89:52357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568629, "uuid": "c8856b79-3534-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.106.207:58609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568751, "uuid": "1135070f-3535-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.160.255:59618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568751, "uuid": "11545ae5-3535-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.148.136:35776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568927, "uuid": "7ab48552-3535-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.233:39959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719568991, "uuid": "a0870e0e-3535-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.155.242:50082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569047, "uuid": "c1f72a40-3535-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.13.190:41399/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569110, "uuid": "e7656a41-3535-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.87:50641/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569166, "uuid": "08fde826-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.99.149:52539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569167, "uuid": "097a7585-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.2:57387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569172, "uuid": "0c765261-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.31.207:45368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569228, "uuid": "2dafc900-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.174:41728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569239, "uuid": "349b3b27-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.135.101:43276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569413, "uuid": "9c44569e-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.119:41491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569467, "uuid": "bc6fe873-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.26.169:46144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569533, "uuid": "e380c148-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.222.81:59727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569539, "uuid": "e719f04a-3536-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.33.234:60687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569591, "uuid": "0668730c-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.183.131.204:56000/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569646, "uuid": "2725180a-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.202.77:48531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569647, "uuid": "277222fd-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.173:42122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569711, "uuid": "4dcb26d5-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.233:39959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569711, "uuid": "4dd37782-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.240.210:41530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569718, "uuid": "51a694cf-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.52.155:52967/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569826, "uuid": "92552534-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.150.76:56340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569886, "uuid": "b6407ceb-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://hellsday-client.shop/App.dll", "Tag": [ { "name": "Hellsday", "colour": "#faab1f", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569891, "uuid": "b92ab5f1-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.206.155:46286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569946, "uuid": "d9f62bdd-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.235:43302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569948, "uuid": "db0219d4-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.97.184.180:50961/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569952, "uuid": "dd48f156-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.226.34:56810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719569973, "uuid": "e9dd295e-3537-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.247.175:41365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570011, "uuid": "00ce3273-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.160.255:59618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570017, "uuid": "041a9d7c-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.248.227:42175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570018, "uuid": "049fb098-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.42.96.16/App.dll", "Tag": [ { "name": "Hellsday", "colour": "#faab1f", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570095, "uuid": "32897b04-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.60.196:41323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570186, "uuid": "68d0c4c8-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.211.238:38468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570307, "uuid": "b12bfd5a-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.223/bot.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570309, "uuid": "b1fd3ef6-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.109.96:40381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570309, "uuid": "b203018d-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.132.234.16/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570311, "uuid": "b32d5f59-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.132.234.16/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570312, "uuid": "b3c2be00-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.223/bot.mpsl", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570325, "uuid": "bbaa750a-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.155.183:56976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570337, "uuid": "c2d877b1-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.121.3.50:50525/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570368, "uuid": "d53cfdd4-3538-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.154.211:57268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570442, "uuid": "01571867-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.148.136:35776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570732, "uuid": "ae54fc91-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.99.149:52539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570737, "uuid": "b14e1411-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.213.200:47555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570850, "uuid": "f4e1b407-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.215.116:50488/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570850, "uuid": "f4e25177-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.43.157:49617/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570851, "uuid": "f5751beb-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://207.246.114.52/build.s.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "L3mon", "colour": "#81d00b", "exportable": true, "hide_tag": false }, { "name": "Manager", "colour": "#5d1cfe", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570852, "uuid": "f5f0624a-3539-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.222:47820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719570923, "uuid": "2058712b-353a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.122.216:49692/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571028, "uuid": "5edc4a60-353a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.31.207:45368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571217, "uuid": "cf18d414-353a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.80:8888/exploit.py", "Tag": [ { "name": "CVE-2022-22947", "colour": "#c9f3ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571326, "uuid": "10970653-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.51.107:37128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571387, "uuid": "34e1b3a4-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.247.175:41365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571388, "uuid": "3537d8a4-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.55.191.226:39533/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571447, "uuid": "583447d0-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.150.76:56340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "8193ecfd-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "8195bc5a-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/mozglue.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "8195df1c-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "81a70256-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/freebl3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "81b7eff9-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "81d29617-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.222.58.113/QZxiWpS132.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "81d3ec35-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.222.58.113/qUSTn118.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571516, "uuid": "81d5e775-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.222.58.113/WUrOeuhFUpRDlUrrpONkG239.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571517, "uuid": "8252dfe0-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/nss3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571520, "uuid": "8420b35d-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.140.101:53869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571566, "uuid": "9f7f6626-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.153/cc0e39c6862066ce/vcruntime140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571566, "uuid": "9fabdee0-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.206.155:46286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571567, "uuid": "a01fd4b7-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.79.27:49559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571687, "uuid": "e79e3ad2-353b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.221.143:55436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571744, "uuid": "09b0c855-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://lsrael.today/tnaket/private/m2.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571744, "uuid": "09b24c14-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://lsrael.today/tnaket/private/m1.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571745, "uuid": "09c983f8-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://lsrael.today/App.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571746, "uuid": "0aa470e5-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.248.142:49153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571746, "uuid": "0ab40b8b-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.248.227:42175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571747, "uuid": "0b21cf47-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.179.16:47752/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571747, "uuid": "0b687bff-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.61.4:53451/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571748, "uuid": "0b9fe0f9-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.148:37808/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571759, "uuid": "12b5e596-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.28.14:37290/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571867, "uuid": "5308ecd5-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.180:41202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719571929, "uuid": "77fac5b2-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.155.183:56976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572051, "uuid": "c07a1048-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdx.pages.microcloud360.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572051, "uuid": "c0bb59be-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.26.251:53833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572111, "uuid": "e42fc61b-353c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.44.100:50170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572172, "uuid": "085a5f21-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.3/test/1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572174, "uuid": "0996fb01-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.3/apk/1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572199, "uuid": "189ab07f-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.216/u0Sa2lNsFUdLyKZ.exe", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572224, "uuid": "27d1d140-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.188/123.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572226, "uuid": "28aaac7d-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.188/tcp.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "4cefe643-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.110/XClient1.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572287, "uuid": "4cfd68b6-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.110/Client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572289, "uuid": "4e1afb7f-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.110/hp.pdf", "Tag": [ { "name": "PDF", "colour": "#25ce58", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572348, "uuid": "7141d236-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.87:39572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572414, "uuid": "98f1df84-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.178.144/controlfirebase65.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572417, "uuid": "9a520092-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/negrocock/file_rxahvjvk.4g3.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572468, "uuid": "b8d4fd95-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.190.81.204/ZEUS/Xrwwkdjo.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572468, "uuid": "b9455040-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.59.168:55667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572471, "uuid": "baf5d5e8-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.190.81.204/ZEUS/Nnuzfpa.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572474, "uuid": "bcc48d20-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.190.81.204/ZEUS/Ecyyoxf.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572485, "uuid": "c2e2181a-353d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.88.128:53550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572594, "uuid": "040daa8b-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.124.121:26416/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572652, "uuid": "26db27a1-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.6.14:37203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572712, "uuid": "4a71c70b-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.107.158:59545/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572770, "uuid": "6cfc44a8-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.22.58:55998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572946, "uuid": "d5b4237d-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.232.175.155/88122//flowersarebautifulforeveryonegraden.gif", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719572948, "uuid": "d6f53edf-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.87.143:35444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573010, "uuid": "fc5a7d46-353e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.248.142:49153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573246, "uuid": "88c2f9b4-353f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.48:47009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573250, "uuid": "8afdd7c6-353f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.186.67.211/22133/RGM.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573324, "uuid": "b75db43b-353f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.220.85:35798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573370, "uuid": "d26f2924-353f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.235.253/66166/BNCX.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573426, "uuid": "f40f493e-353f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.51.107:37128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573427, "uuid": "f4646a09-353f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.180:41202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573547, "uuid": "3c07e5af-3540-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.47:38876/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573629, "uuid": "6d27c589-3540-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.185.160:36024/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573670, "uuid": "859cbb8d-3540-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.213.200:47555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573733, "uuid": "aaf59f58-3540-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.232:53458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573846, "uuid": "ee9e859b-3540-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.87:39572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573910, "uuid": "1485f5a0-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://uploaddeimagens.com.br/images/004/805/162/original/new_image_%281%29.jpg", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573910, "uuid": "149ab4d2-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.235.253/44155/OTC/ot.o.o.ooo.doc", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573911, "uuid": "153d6ff8-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://evoluxcontabilidade.com.br/pub/vpAAbDGGwk37.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573911, "uuid": "1550340a-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://evoluxcontabilidade.com.br/pub/Taarepersedes.sea", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573912, "uuid": "156eeb8e-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://evoluxcontabilidade.com.br/xload/yCdidoBbVBEJ173.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573912, "uuid": "157d346c-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://evoluxcontabilidade.com.br/xload/Rumner.xtp", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719573970, "uuid": "384c72c0-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.102.128:50061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574025, "uuid": "58d55e59-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/server/extrato_venom.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574025, "uuid": "595382a3-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.59.168:55667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574026, "uuid": "596500d6-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/dll/ventrypoint.txt", "Tag": [ { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574026, "uuid": "59763603-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/dll/vdll.txt", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574027, "uuid": "5a5ea0b9-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/server/anybackup.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574027, "uuid": "5a85333a-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/server/anyhnvc.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574028, "uuid": "5aa94e14-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/dll/vrump.txt", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574029, "uuid": "5b77f65d-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/server/vbackup.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574054, "uuid": "6a356a86-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/server/rbackup.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574054, "uuid": "6a3638ad-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.40.96.164/rat/server/venom_teste.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574213, "uuid": "c9669faf-3541-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.88.128:53550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574329, "uuid": "0e4cfbb1-3542-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.6.14:37203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574450, "uuid": "564ed87b-3542-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.135:35591/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574516, "uuid": "7ddfebbf-3542-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.87.143:35444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574516, "uuid": "7de78d66-3542-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.91.77.80/sauna/neste.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574626, "uuid": "bf66a80c-3542-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.10.205.102:1911/SorterObjectArrayNegateSaturate.dll", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574752, "uuid": "0a2b4872-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-whatsap.online/panel/uploads/Enkfaccyg.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574809, "uuid": "2c2159be-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.48:47009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574866, "uuid": "4e54e600-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.3.127:37166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574867, "uuid": "4ef43b1d-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.222.81:59727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574878, "uuid": "559233ca-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://b46.oss-cn-hongkong.aliyuncs.com/config/qNVQKFyM.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574944, "uuid": "7ce8e83d-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.1:59442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719574986, "uuid": "95a5b579-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.48.132:44838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575049, "uuid": "bb6cacc3-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.220.85:35798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575110, "uuid": "dfb84806-3543-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.54.14:48954/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575227, "uuid": "253500e3-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.232:53458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575286, "uuid": "48dfb4ac-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.124.153:45211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575416, "uuid": "9630b5f4-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.199.149:47147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575525, "uuid": "d75b833f-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.221.143:53053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575544, "uuid": "e23cb9e8-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.175.170:37725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575587, "uuid": "fbe9fd77-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.171.132:51931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575587, "uuid": "fbf87fc2-3544-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.230.103:42236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575766, "uuid": "66ee5dd0-3545-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.61:40315/mozi.a", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575830, "uuid": "8cb5a30d-3545-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.8:45032/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575920, "uuid": "c258288b-3545-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.89.102:59939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719575947, "uuid": "d262f48d-3545-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.48.132:44838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576068, "uuid": "1ad42ba3-3546-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.42.6:43916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576191, "uuid": "63e1cf69-3546-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.71.223:37197/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576201, "uuid": "69ed5589-3546-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.6.145:55614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576249, "uuid": "86610a64-3546-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.86.249:36147/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576315, "uuid": "adf9fd68-3546-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.234:42903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576487, "uuid": "149e983b-3547-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.1:59442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576488, "uuid": "14d63d0d-3547-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.155.209:51616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576562, "uuid": "414416c9-3547-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.145.1:56429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576667, "uuid": "7fbd6570-3547-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.124.75:39808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576847, "uuid": "eae42db6-3547-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.230.103:42236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576911, "uuid": "11153c97-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.212.46:38803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576923, "uuid": "1847d08e-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.59:59053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576965, "uuid": "31276106-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/ABBAS/file_uhetjgxl.v4r.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576965, "uuid": "312900e3-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/ABBAS/file_0sc51o5r.mwz.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576965, "uuid": "313c24aa-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/ABBAS/file_5joxqpuv.gj1.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576965, "uuid": "313c7e46-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/ABBAS/file_ywdpd2sn.d1n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719576965, "uuid": "31427841-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/ABBAS/file_2arfrshw.gu1.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577025, "uuid": "554d4bec-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_qx3aey3f.1qg.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577025, "uuid": "554e472f-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/Ws/file_zr23dl12.dru.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577025, "uuid": "5551905b-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_4e4begps.pzh.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577025, "uuid": "5551ca7c-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_f4bxgmgo.qrn.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577025, "uuid": "5557333a-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/Ws/file_d5sfng2r.jcq.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577025, "uuid": "555a43fc-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/Ws/file_wr1itxa0.f5d.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577026, "uuid": "561272a8-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_bmwep2mh.pxe.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "56435c92-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_byxt4s5k.2c3.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "56470f4c-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/syscore/file_m5elc3cj.qm4.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "56492161-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_pgrz1aop.xme.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "5651c0a1-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_2r2z2y33.fdz.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577027, "uuid": "5672a46f-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_1ewfp0ww.1vf.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56b307e0-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_ehqiefvi.yc4.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56bde19e-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/syscore/file_ntlwqyo5.ddf.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56da5a83-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_1pdttpqa.mxd.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56dce7ce-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_cldohf23.r3g.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56e941a3-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_bp30ka0c.ddu.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56eb6b49-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_0mwz3d0r.ba4.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "56ec00fa-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/syscore/file_elaqoxvn.kay.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577028, "uuid": "57049165-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.183.208/Users_API/CryptersAndTools/file_fkw11kof.vk3.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577150, "uuid": "9fbbfa85-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.211:58329/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577150, "uuid": "9fe22f2f-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.93.72:56083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577152, "uuid": "a0dfe3a4-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.210.253:37725/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577155, "uuid": "a295e17f-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.77.200:46863/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577160, "uuid": "a564d5cf-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.130.69:54666/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577211, "uuid": "c3f17f13-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.12.187:49761/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577273, "uuid": "e90df3b3-3548-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.21:39721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577451, "uuid": "53191306-3549-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.212.226.211:50279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577691, "uuid": "e20c5ae7-3549-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.162:41146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577744, "uuid": "01b0c40a-354a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.90/Solarnet/bot.py", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "configurations", "colour": "#a62f4c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577776, "uuid": "15111f9c-354a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.249.250:44847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577878, "uuid": "518a173e-354a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.117.152:38570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577929, "uuid": "70198359-354a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.214.226:45542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719577992, "uuid": "9591eb11-354a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.247.158:45395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578228, "uuid": "2232a47f-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.145.1:56429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578286, "uuid": "44e728b3-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.155.209:51616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "b07b27d2-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.248.81.112:18750/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "b09a8d94-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://186.2.171.60/AGOV-Access.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "b0ccf715-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.agov-access.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "b0d214c3-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.124.75:39808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "b0f178fb-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.agov-ch.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578467, "uuid": "b0f54389-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.register-agov.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b1271a94-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.215.102:33616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b135d481-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://hd.hdweb2.pw/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b13df638-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://tv.yayins.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b1434780-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.agov-ch.net/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b1472b4f-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://tv.surebettr.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b1478c4f-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.41:55645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b14e36f6-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.82:37663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b1642984-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.agov-access.net/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b16dd1f5-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://extraiptv.giize.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b1792812-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.extraiptv.giize.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578468, "uuid": "b17c9c1b-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.202.162:57581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578469, "uuid": "b1d62476-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.202.162:57581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578470, "uuid": "b26d5eb5-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.244.36.206/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578473, "uuid": "b4283af9-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/sora.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "d3f98833-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.arm5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "d3fce1cb-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "d400c912-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.16.171:40894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578526, "uuid": "d40c6309-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.ppc", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "d42c0e6c-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "d4336b82-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.arm6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "d4380ca1-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.m68k", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "d43eddb9-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.179:49304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "d441d820-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.mpsl", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578527, "uuid": "d4612946-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.sh4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578539, "uuid": "db5e04b1-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.19:42170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578544, "uuid": "de759eef-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.154:49847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578559, "uuid": "e7586855-354b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.169.203.159:57004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578663, "uuid": "25ae8306-354c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.70:49322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578711, "uuid": "423319ab-354c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.59:59053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578886, "uuid": "aa529917-354c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.117.152:38570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719578961, "uuid": "d70bda58-354c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.250.100:59981/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579011, "uuid": "f4dfdd18-354c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.17.213:53909/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579188, "uuid": "5e28a11b-354d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.26.251:53833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579368, "uuid": "c980c810-354d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.12:57090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579426, "uuid": "ec0ab16b-354d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.249.250:44847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579488, "uuid": "114c1ba4-354e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.97.89:35910/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579547, "uuid": "34835d3e-354e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.179:49304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579669, "uuid": "7cf4422d-354e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.162:41146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579786, "uuid": "c32791e5-354e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.247.158:45395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579815, "uuid": "d412b998-354e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.16:35778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579847, "uuid": "e75970dd-354e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.120.234:39706/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579910, "uuid": "0cfda25b-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.51.44:46909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "0d4f49bd-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.51.44:46909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "0d7b997e-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "0d7c89a2-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "0d80055b-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579911, "uuid": "0d81c5b4-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "0de62f8d-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "0debb200-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579912, "uuid": "0df30e28-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579913, "uuid": "0e7df370-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579913, "uuid": "0e7e0515-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579913, "uuid": "0e7edc73-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/curl.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579913, "uuid": "0e927bf7-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.210.152/bins/SB.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579967, "uuid": "2eebdb09-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.233:41518/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719579973, "uuid": "3228c356-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.19.31:34632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "7775174a-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/bin", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "7775e94d-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/pay", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "7775ed13-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/yarn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "77787def-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/zte", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "778d3a6e-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/jaws", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "778d698a-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/zyxel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580089, "uuid": "779d2612-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/hnap", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580090, "uuid": "7816c9d6-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/lg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580090, "uuid": "782691c2-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/thinkphp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580090, "uuid": "784614c9-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/real", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580090, "uuid": "784d4c2a-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/huawei", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580091, "uuid": "78737013-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/pulse", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580091, "uuid": "7881dd9f-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/aws", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580091, "uuid": "7884fd82-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/goahead", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580091, "uuid": "78bd2b91-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/76d32be0.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580093, "uuid": "79f3bf58-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.44.28:39238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580147, "uuid": "99dca83e-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/sora.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580147, "uuid": "9a0518f1-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.172.177.16/gpon443", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580147, "uuid": "9a1f60e9-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.82:37663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580150, "uuid": "9bed311b-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.27:33705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580215, "uuid": "c293602f-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.2/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580270, "uuid": "e3393644-354f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.171/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580333, "uuid": "08efa4b1-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.70:49322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580509, "uuid": "721c6b02-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://covid19help.top/roth.doc", "Tag": [ { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580510, "uuid": "72b5bc0b-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.216/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580511, "uuid": "72c30653-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.216/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580570, "uuid": "95e78e4a-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580570, "uuid": "961e3db8-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580570, "uuid": "964f54d6-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580570, "uuid": "965175b1-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580571, "uuid": "9684b8bc-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580571, "uuid": "96f4db6d-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580571, "uuid": "96f51229-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.59/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580633, "uuid": "bbde386b-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.221.248:33206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580687, "uuid": "dc3622d9-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.123.70:34579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580747, "uuid": "ffc162bf-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580747, "uuid": "ffd8f0b9-3550-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580748, "uuid": "0001fb88-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.162.20.166/bins/sora.arm", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580748, "uuid": "004dbddf-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580748, "uuid": "008fee6d-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "009c5b6a-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "00b30581-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "010cd6e9-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "010e594c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "0110be17-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580749, "uuid": "0120253a-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "01338a1e-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "01379751-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "014b78bd-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://rucnc.romc2.nl:8967/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580750, "uuid": "0157993c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.21.122:8967/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580873, "uuid": "4af7f85d-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.48.22:56990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580891, "uuid": "55892554-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.139.80:41674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580928, "uuid": "6b665fa4-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.12:57090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719580992, "uuid": "91fc47f7-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.38.24:54793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581165, "uuid": "f8daec48-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/li", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581165, "uuid": "f8dfbab7-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/li", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa6525a9-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dlr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa7fa8d4-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dlr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa8810f7-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dlr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa8ae0af-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dlr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa8cf87a-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dlr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa996881-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fa9c8e41-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "faa1b508-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dlr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "faa3bd01-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/jk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "faa8bf4c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fab7ccef-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dlr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fad2f605-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fad4427c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fad596de-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fadb4f70-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dlr.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fadda565-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/goahead.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fae36e84-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581168, "uuid": "fae96657-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fae9df45-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dlr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "faf8c530-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dlr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "faf8c52e-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "faf8c855-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fafd2844-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb149f86-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb37f709-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb605b73-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb608f96-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb63499c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/aaa", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb6ea726-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581169, "uuid": "fb775b42-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/jk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fb98dd03-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fb992c89-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/goahead.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbb2f66f-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbc5616c-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/ruck", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbcdfbab-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbd14fca-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/nsh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbd35a3f-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/linnn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbdbe466-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/linnn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbf1d814-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/av.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581170, "uuid": "fbfaa2ef-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/av.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc350de6-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc4448d0-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dlr.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc525f7e-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc5394e8-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc564113-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/nsh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc5651ea-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/ruck", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc591836-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dlr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc695fe1-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc74d169-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/aaa", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc812583-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/dvr", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc8243db-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc83740d-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581171, "uuid": "fc94a1f6-3551-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/dvr", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581289, "uuid": "42a3df16-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.231.173:37339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581292, "uuid": "446dc92d-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.3.209:58533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "652e823f-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Ssh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "652f3747-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "653115ee-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "65311b07-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Smpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "6535d1e6-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "653dc735-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "653fc8dc-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "654a00e3-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Smips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "654dbb90-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "654e70b9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "6552c397-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "6556f347-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/g", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "655c7127-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/.Sarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "656b3243-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/bx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581347, "uuid": "6578c36a-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e6c82ab-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Smpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e85628d-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e87fa91-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e89d6a5-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e9289b9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e96a52f-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Ssh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e98559f-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e9860cb-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/g", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8e9a2211-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8ea404e5-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/bx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581416, "uuid": "8eaa07aa-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581417, "uuid": "8ed66905-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581472, "uuid": "aff14cfd-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581472, "uuid": "aff14fe1-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Sarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581473, "uuid": "b08e4791-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.123.70:34579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581527, "uuid": "d0b828ae-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.247:8080/.Smips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581528, "uuid": "d14bd3bc-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.27:33705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f574d198-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/bx", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f57537d2-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/b", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f58ae394-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sarm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f58b12a5-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sm68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f58b6ecc-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f590cd57-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/g", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f59101d1-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sarm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5962ad5-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Smips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f59addc9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sx86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5a2cb50-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sarm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5a2d63c-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sarm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5a4ed57-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sx86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5a66783-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Smpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5b61b61-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Ssh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581589, "uuid": "f5bde1d3-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/:8080/.Sspc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f85672ee-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Ssh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f8575159-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/g", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f85c1eba-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sx86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f863b95b-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f86be8d9-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sm68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f8735a26-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/b", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581594, "uuid": "f8ba28be-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Smpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f8dc4db4-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sarm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f8e721dc-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/bx", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f8ec6bca-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sarm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f8f2894f-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sarm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f8f7e00a-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Smips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f8f844d4-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://ip.tvguzel.com/AGOV-Access.dmg", "Tag": [ { "name": "186.2.171.60", "colour": "#553cb7", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581595, "uuid": "f900d2fb-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sarm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581600, "uuid": "fbe3f39c-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.174.63:40343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581600, "uuid": "fc1eb803-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://37.27.82.196/Arc12645413.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581600, "uuid": "fc26c59f-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.27.82.196/Arc12645413.dmg", "Tag": [ { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581600, "uuid": "fc299127-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://static.196.82.27.37.clients.your-server.de/Arc12645413.dmg", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581601, "uuid": "fcd6877a-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://static.196.82.27.37.clients.your-server.de/Arc12645413.dmg", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581601, "uuid": "fcd896a7-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zestyahhdog.com/Arc12645413.dmg", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581601, "uuid": "fcdc4515-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.zestyahhdog.com/Arc12645413.dmg", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581601, "uuid": "fcdcdfa4-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://zestyahhdog.com/Arc12645413.dmg", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581601, "uuid": "fcea03bf-3552-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://zestyahhdog.com/Arc12645413.dmg", "Tag": [ { "name": "37.27.82.196", "colour": "#cb9c05", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "PoseidonStealer", "colour": "#8CA252", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581646, "uuid": "174db20c-3553-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://xijinping.mov/.Sx86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581716, "uuid": "4140840a-3553-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.219.206:52679/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719581771, "uuid": "622f9232-3553-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.54:38114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582158, "uuid": "48ec25bd-3554-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.146.89:44808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582246, "uuid": "7d04dcab-3554-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.38.24:54793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582547, "uuid": "305e5540-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.9.3:33977/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582547, "uuid": "305e72c6-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.253.146:45473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582547, "uuid": "308905a2-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.9:35885/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582549, "uuid": "31c1c0dd-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.26.212:57704/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582552, "uuid": "334e2fb2-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.146:43731/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582848, "uuid": "e3cb5d60-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719582850, "uuid": "e4f76eaf-3555-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://100.16.168.239:3216/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583030, "uuid": "507b9cda-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.208.249:42403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583030, "uuid": "50bcf23e-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/aa/daemon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583031, "uuid": "50c90acc-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/aa/arpd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583084, "uuid": "70d1edcb-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/dvr", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583087, "uuid": "72441287-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.3.209:58533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583088, "uuid": "72bbf641-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/dvr.zip", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583145, "uuid": "94b495ca-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/ggg", "Tag": [ { "name": "botnet_config", "colour": "#b45e12", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "bcd48e28-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/log/netis/ki", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "bcf8f40a-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/log/netis/iptables-d", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583212, "uuid": "bd084e2a-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/log/netis/shell", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583214, "uuid": "bddb2405-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/log/netis/s", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583267, "uuid": "ddbda022-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/log/openwrt_log/arpd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583283, "uuid": "e6fd6ce3-3556-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.243.175:41279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583328, "uuid": "01f4f7b2-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.174.63:40343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583385, "uuid": "2413c000-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/z", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583385, "uuid": "241b2ba6-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/u", "Tag": [ { "name": "botnet_config", "colour": "#b45e12", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583397, "uuid": "2afb8ffe-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583445, "uuid": "479464bd-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/syscsc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583445, "uuid": "47f13057-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.2.172/tel.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "49841304-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "4992bd2c-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.248.169:50272/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583448, "uuid": "49945074-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583449, "uuid": "4a3b5a87-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.140.239:48542/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583451, "uuid": "4b19b888-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.237.29.203:57004/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583454, "uuid": "4d0265ae-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.199.150.121:33201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583674, "uuid": "d06502cc-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.245.103:41597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583688, "uuid": "d85d70cc-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.190.201:52449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583688, "uuid": "d8c3fc41-3557-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.34.21:49273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719583813, "uuid": "236075b6-3558-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.46.155:41151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584047, "uuid": "ae8ce9ac-3558-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.22:47273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584227, "uuid": "1a2101f8-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.119.20:40120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584228, "uuid": "1a5d6193-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584285, "uuid": "3c86338d-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/csc.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584348, "uuid": "61cba4f9-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.60.98:53385/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584348, "uuid": "61d91209-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.66.223:50317/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584353, "uuid": "652a5efa-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.15.57.30:48022/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584360, "uuid": "692a02d3-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.99:35190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584362, "uuid": "6a8ca8e5-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.41.180:54098/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584410, "uuid": "87218331-3559-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.33.46.146/file/md", "Tag": [ { "name": "botnet_config", "colour": "#b45e12", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584711, "uuid": "3a29cb4f-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.195:54851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584726, "uuid": "43681df7-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.208:41945/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22b4f85-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22b657b-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22d3268-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22dbc39-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22e407c-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22e40ac-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22e6b8d-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_arm7", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22e764f-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22e7bd3-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//download.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22e8a83-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584885, "uuid": "a22ea72a-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.135.251//linux_386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719584949, "uuid": "c813c8d1-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.120:51680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585021, "uuid": "f350d93e-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.242:39145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585022, "uuid": "f3a527e4-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585022, "uuid": "f3a5b29e-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585022, "uuid": "f3c1d456-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585023, "uuid": "f44fdb4f-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585023, "uuid": "f45c0822-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585023, "uuid": "f490684a-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585024, "uuid": "f4d5538e-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585026, "uuid": "f6058510-355a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585072, "uuid": "11623723-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.223/hidakibest.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585072, "uuid": "119876fc-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.190.201:52449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "57be3f46-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "57bf1415-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "57cd3e13-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585190, "uuid": "57cd8614-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "583901d0-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "58717aea-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "5877dc7f-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585191, "uuid": "58c8fa46-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585192, "uuid": "59569ab9-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585193, "uuid": "5973d565-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585193, "uuid": "59e63e85-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.232.198/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585194, "uuid": "5a3cfb36-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.199.150.121:33201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585247, "uuid": "7a1a1da4-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:60963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585248, "uuid": "7aa7769d-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.35.70:59086/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585367, "uuid": "c1523b5b-355b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.34.21:49273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585547, "uuid": "2c93c4a0-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585547, "uuid": "2c93d24c-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585547, "uuid": "2c93d560-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585547, "uuid": "2c9cde20-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "2d38d227-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "2d49c0d1-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585548, "uuid": "2d61fa42-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "2e06d58e-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "2e08bef7-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "2e0c69e7-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585549, "uuid": "2e15885b-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.29.207/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585551, "uuid": "2f5f683c-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.109:48292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585791, "uuid": "bddf7214-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps718926.ovh.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585794, "uuid": "bfa636c3-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://static-91-225-132-57.devs.futuro.pl/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585796, "uuid": "c134d130-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://host-95-255-114-11.business.telecomitalia.it/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585798, "uuid": "c224fc43-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://qgf338jtt8tty7rx.myfritz.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585798, "uuid": "c247be0f-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://nassascha.synology.me/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585800, "uuid": "c386abff-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://host-195-103-203-106.business.telecomitalia.it/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585801, "uuid": "c4148ac0-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://epei77.direct.quickconnect.to/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585802, "uuid": "c4e31c54-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://gandalf86.no-ip.org/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585803, "uuid": "c5302784-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://p784bb7f1.toymnt01.ap.so-net.ne.jp/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585810, "uuid": "c94be191-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://pic.shouhucj.com/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585814, "uuid": "cbb87e34-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://softbank126023203236.bbtec.net/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585816, "uuid": "cce58243-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://syn-047-229-251-027.res.spectrum.com/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585877, "uuid": "f17ef048-355c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://host81-136-139-237.in-addr.btopenworld.com/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585916, "uuid": "0891397a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.225.132.57/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585918, "uuid": "0a12b0f5-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.209.198:48107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585923, "uuid": "0cd28619-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.87.76.41/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585924, "uuid": "0d91eb8e-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83-87-76-41.cable.dynamic.v4.ziggo.nl/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585927, "uuid": "0f45e391-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585928, "uuid": "0fc977a5-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585929, "uuid": "10811d20-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.53.15.54/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585929, "uuid": "10aaa7cd-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.213.59.251/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585929, "uuid": "10aea9de-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://cp.blazemvpn.com/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585930, "uuid": "11209966-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114-34-248-97.hinet-ip.hinet.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585930, "uuid": "1126de19-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.186.91.61/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585931, "uuid": "115724df-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.133.67.91/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585933, "uuid": "12c740bd-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.43.26.9/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585942, "uuid": "1858d83a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpc138130-hatf10-2-0-cust814.9-3.cable.virginm.net/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585948, "uuid": "1ba1c340-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.253.12.111/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585951, "uuid": "1da8cb41-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585952, "uuid": "1e37ef31-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.53.15.17/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585954, "uuid": "1f0fa95d-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.103.73.226:8080/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585954, "uuid": "1f3ae686-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.232.38.34/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585956, "uuid": "2040cc67-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://23-122-210-174.lightspeed.cicril.sbcglobal.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585956, "uuid": "2041bed9-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.229.251.27/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585958, "uuid": "21de5f99-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.117.27.115/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585958, "uuid": "21f6c6ac-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61-222-220-209.hinet-ip.hinet.net/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585959, "uuid": "223c86b9-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.31.159.47/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585960, "uuid": "22996dd2-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.147.147.172/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585960, "uuid": "22a0f5db-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.222.116.64/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585961, "uuid": "235399c7-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.75.183.241/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585961, "uuid": "2371f957-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.149.164:8080/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585961, "uuid": "23859398-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.50.52.240/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585964, "uuid": "2584fe43-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.192.233.242/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585966, "uuid": "26b40008-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585967, "uuid": "26cd75b8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.214.192.147/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585970, "uuid": "28e57406-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.46.23.180/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585972, "uuid": "29c82143-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.215.253.57/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585972, "uuid": "29decf86-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585977, "uuid": "2d499e1a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220-133-67-91.hinet-ip.hinet.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31823aac-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.28.217.34/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "318c207a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.255.114.11/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31a81ffa-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.249.250.81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31b9773a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.28.3.90/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31c1b813-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.157.110.232/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31cc1bc6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.191.192/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31ccd8ad-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.190.171.149/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "31cd6063-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.36.153.151/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585985, "uuid": "320b1bfb-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.53.44/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585986, "uuid": "32511b20-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60-249-250-81.hinet-ip.hinet.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585987, "uuid": "330f7ba2-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://184.151.249.241/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585987, "uuid": "33102e71-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.225.211.141/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585987, "uuid": "33152a36-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.9.26.224/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585987, "uuid": "3336f845-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.22.139.189/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585988, "uuid": "338e1994-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.115.102.3/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585989, "uuid": "3446879f-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pic.ng-api-001.xyz/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585991, "uuid": "35193a4e-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.91.225.168/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585995, "uuid": "3770eb08-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.142.27.138/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585995, "uuid": "37b4de57-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.146.215.59/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585997, "uuid": "38d17d59-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.68.70.192:8080/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585997, "uuid": "38d2200d-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.185.141.46/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585999, "uuid": "39df1d7c-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.222.220.209/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719585999, "uuid": "3a5aed5f-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.140.77.206/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586000, "uuid": "3a8c3ac3-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586001, "uuid": "3b371065-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.68.70.192/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586002, "uuid": "3c1092a2-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.155.61/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586005, "uuid": "3d86adef-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.29.46.120/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586006, "uuid": "3e44fde4-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.202.67/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586006, "uuid": "3e542eba-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.253.253.152/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586007, "uuid": "3eef04be-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.143.54.213/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586007, "uuid": "3f031684-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.213.143.225/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586010, "uuid": "409b3c36-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://126.23.203.236/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586010, "uuid": "40d0db50-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.68.129.104/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586010, "uuid": "40e73c21-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586011, "uuid": "4114b32b-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.53.15.18/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586012, "uuid": "422257f7-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586015, "uuid": "439e1249-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.53/nigger.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586016, "uuid": "443ac51f-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.20.115.5/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586016, "uuid": "443c348d-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.28.218.163/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586016, "uuid": "443d325e-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.232.38.41/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586017, "uuid": "448bd206-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.34.248.97/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586018, "uuid": "453bdf6b-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.103.203.106/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586019, "uuid": "45d88584-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://cm192.myftp.biz/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586020, "uuid": "46e1b2bd-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78-20-115-5.access.telenet.be/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586021, "uuid": "4709944c-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.126.193.34/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586021, "uuid": "4751576e-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.red-88-28-217.staticip.rima-tde.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586023, "uuid": "48a534ee-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://184.148.5.123/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586024, "uuid": "490f619b-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.45.165.45/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586028, "uuid": "4b47342f-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpe90-146-215-59.liwest.at/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586030, "uuid": "4c649451-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.26.97.52/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586030, "uuid": "4c650ea1-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.250.53.236/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586031, "uuid": "4cff2b10-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5-157-110-232.dyn.eolo.it/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586032, "uuid": "4db11b82-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.160.129.229/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586034, "uuid": "4f0d8cf1-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.122.210.174/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586038, "uuid": "51213ef3-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.123.116.87:8080/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586044, "uuid": "54a655ec-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.60.25.240/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586047, "uuid": "569c0d7a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.50.35.6/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586047, "uuid": "56f62ec1-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.232.38.43/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586049, "uuid": "57ee05b3-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.250.120.10/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586050, "uuid": "5894c270-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.185.193.208:8080/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586052, "uuid": "596b202d-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://166.166.188.230/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586053, "uuid": "5a0b0e4a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.136.139.237/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586053, "uuid": "5a13ee0f-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.179.136.112/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586053, "uuid": "5a178fdf-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.51.16.51/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586054, "uuid": "5ac04717-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.58.62.74/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586055, "uuid": "5b407775-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://230.sub-166-166-188.myvzw.com/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586056, "uuid": "5bcea2ba-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.226.135.252/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586059, "uuid": "5dbebe2e-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.116.110/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586074, "uuid": "66bce9f7-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.217.78/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586078, "uuid": "690294d7-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.3.78.195/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586088, "uuid": "6efc6d05-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.25.228/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586097, "uuid": "74a806f1-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.207.44.106/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586124, "uuid": "846544a2-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.231.82.40/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586178, "uuid": "a482ff81-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.40.112/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586191, "uuid": "acafb891-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.232.37.254/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586207, "uuid": "b661edf0-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586208, "uuid": "b670e856-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/bins.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586208, "uuid": "b69d6213-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "b79ddbff-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "b7a1d392-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "b7b135ce-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "b7d84ce8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "b7ec5364-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.214.58:45285/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586210, "uuid": "b7fe2fd3-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586211, "uuid": "b877d07c-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.168.149:57577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586211, "uuid": "b8a27f05-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586212, "uuid": "b8c6bda8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.180.242:53540/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586213, "uuid": "b9da6761-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586213, "uuid": "b9e22f71-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "ba055b21-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "ba067ea5-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586214, "uuid": "ba0784e2-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.247.60/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586227, "uuid": "c20daa5b-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://data.discuz.mobi/Photo.scr", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586269, "uuid": "db2fbbdf-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.120:51680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586285, "uuid": "e45298a0-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.143.133:33443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586327, "uuid": "fd8e22a6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.195:54851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586763, "uuid": "01c600d0-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.9:54917/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586988, "uuid": "879c09f9-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.150:52110/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586988, "uuid": "87a7f129-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.217.184:50463/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586992, "uuid": "8a46c61b-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.88.173:39020/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719586999, "uuid": "8dfa4031-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.80.132:53692/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587001, "uuid": "8f4249af-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.125.50:36992/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587020, "uuid": "9aa7fcce-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.8.31:52290/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587047, "uuid": "aa819272-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.242:39145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587051, "uuid": "ad51ab2a-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.214.72:60785/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587060, "uuid": "b25ce1c3-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.73.201:47818/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587061, "uuid": "b328887e-355f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.91.64:58524/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587290, "uuid": "3bc32d67-3560-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.59:52899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587296, "uuid": "3f06f8e4-3560-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.241.153:52265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587350, "uuid": "5f76ba96-3560-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.2.122:49075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587675, "uuid": "20fe1194-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.209.198:48107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587716, "uuid": "396d0a04-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.18.159:33138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587827, "uuid": "7b959cc1-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.168.149:57577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0a688ee-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0ac31e5-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0ac367d-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.m68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0bb9310-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0c82360-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/bins.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0e7bc74-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587889, "uuid": "a0ecac65-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a10ae75c-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a11af97b-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a14f8759-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a14f8c52-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a15e24a0-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a166ae61-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.arm4t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587890, "uuid": "a1798ef0-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.114.45/rebirth.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587901, "uuid": "a7b55276-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.213.164:34697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587945, "uuid": "c231499e-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.147.70:47032/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719587951, "uuid": "c57323a2-3561-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.36:52501/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588140, "uuid": "3631a05e-3562-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.250.242:45582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588370, "uuid": "bf14ac31-3562-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.223.79.89:54774/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588425, "uuid": "e0652ca6-3562-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.42.40:34257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588616, "uuid": "524181b1-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.143.185:49618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588619, "uuid": "53851255-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/bins.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588619, "uuid": "53b3a68f-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.154.232.58:37287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "73deb177-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "73f833ee-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "73f9cedf-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "73fa3f8d-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "74013450-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.arm5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "7406571b-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "7407b4bc-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "740a9030-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "740e0a27-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.arm5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "74162aa9-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "741b5261-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "742fb0f2-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588673, "uuid": "7438dc19-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "745eddec-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "745fca03-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "7485de0f-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.gnueabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588674, "uuid": "74ab79ba-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "750003fc-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "751fc106-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588675, "uuid": "7522e43a-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanrio.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588729, "uuid": "9529289d-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.27.135/bins/sanriont.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588731, "uuid": "964891ee-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.127:59945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588743, "uuid": "9dbf7fd8-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.87.123:41597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "dbd7df91-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "dbda2812-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "dbe3df4c-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.44.238.75/8UsA.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588847, "uuid": "dbf2376e-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588848, "uuid": "dbf70733-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.44.238.75/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588848, "uuid": "dc0f8331-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588848, "uuid": "dc168218-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588848, "uuid": "dc624fbf-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.205.211:45161/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "dd27a8d6-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "dd4be137-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "dd555eeb-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "dd7e5bba-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "dd891bfb-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "dd970a8b-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588850, "uuid": "ddb3914f-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588851, "uuid": "ddc033ce-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.235.150:48402/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588851, "uuid": "de18cb15-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588852, "uuid": "deb9b1b7-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588852, "uuid": "dec515e2-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "df030766-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "df0f7d37-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "df43da18-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "df4b53f8-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.123/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588853, "uuid": "df4db436-3563-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588909, "uuid": "00c77edb-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588909, "uuid": "00cfda32-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588910, "uuid": "00f692a3-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588910, "uuid": "0104208b-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.206/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588910, "uuid": "010ae1e8-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.2.122:49075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588910, "uuid": "0118e73f-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.244:56942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588911, "uuid": "0188eb16-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588911, "uuid": "01d2ff92-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588911, "uuid": "01ea931f-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588911, "uuid": "01eff695-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588912, "uuid": "02546ada-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588912, "uuid": "027ea3f6-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588912, "uuid": "02973307-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588912, "uuid": "02a4863f-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://net.icdns.online/bot.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588966, "uuid": "22a3eaa3-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588966, "uuid": "22b423f3-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588967, "uuid": "231d7093-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.18.159:33138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588967, "uuid": "232d3081-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588967, "uuid": "235ad027-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588967, "uuid": "2368d15f-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588968, "uuid": "237ea920-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588968, "uuid": "23a1f775-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588968, "uuid": "23a5a660-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588970, "uuid": "24b1258f-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.71.76:50024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588971, "uuid": "25ce7604-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.71.76:50024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719588975, "uuid": "27c213c0-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.11.27:57472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589026, "uuid": "4616ddbb-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589026, "uuid": "46227eb8-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589027, "uuid": "470424d9-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.215.104:46051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589027, "uuid": "471eaeba-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.botnet123.cc/bot.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589085, "uuid": "69b7c385-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://botce.heihuo8.top/bot.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589086, "uuid": "69d4c6e2-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://botce.heihuo8.top/bot.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589086, "uuid": "69d4c8e3-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://botce.heihuo8.top/bot.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589086, "uuid": "69e5d951-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://botce.heihuo8.top/bot.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589086, "uuid": "69f0fd97-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://botce.heihuo8.top/bot.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589146, "uuid": "8dc70200-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.223:58614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589164, "uuid": "98d7e088-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.15.64:50289/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589209, "uuid": "b3b38403-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.8:45032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589266, "uuid": "d5a5b473-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.116.236:57546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589267, "uuid": "d6005137-3564-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.195.36:59874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589626, "uuid": "ac34485a-3565-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.228.7:50614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589747, "uuid": "f3fb4cd1-3565-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.186:33285/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719589815, "uuid": "1c6fc607-3566-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.110.160:53220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590045, "uuid": "a600e0ee-3566-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.254:34929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590109, "uuid": "cbf36f39-3566-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.34.52:53607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590288, "uuid": "36bc690e-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.35.247.70:43276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590345, "uuid": "58c0c6a5-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/Rihypax_LetThereBe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590345, "uuid": "58c3ee4d-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Rihypax_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590345, "uuid": "58ceb7e7-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/DtRbsscQ/lander.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590345, "uuid": "58cf55f7-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/DtRbsscQ/lander.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590346, "uuid": "590f9a92-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/LgGFdDAm/AntiVirus2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "59be8b85-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/1/rkAIWKEr1/win4.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "59bf0c18-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/1/rkAIWKEr1/win1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "59bfed8e-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Imejygo_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "59c3aa03-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Unusoke_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "59caf46e-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/ycJOjCuR2/lamd.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "59fab3e0-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Azafyvo_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590347, "uuid": "5a00c1d9-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/ycJOjCuR/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a0da7b1-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Enomoky_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a1be765-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Ebyloto_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a1c05cf-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/rkAIWKEr2/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a1c34cc-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/ycJOjCuR/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a308a73-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/Xujamon_LetThereBeNighti", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a62d2dc-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/rkAIWKEr2/win4.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a783ff3-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/ycJOjCuR2/use%20in%20future", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a82b5f6-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/all%20file/DtRbsscQ/lander.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a84a0b9-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/rkAIWKEr2/win1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590348, "uuid": "5a9e0415-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/LgGFdDAm/AntiVirus.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5aa21aeb-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/ycJOjCuR/lamd.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5aacd504-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/DtRbsscQ/lander2.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5ad63105-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/all%20file/rkAIWKEr/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5aea6162-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/rkAIWKEr/win2.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5af135ec-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/AntiVirus4.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5af2faed-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/1/rkAIWKEr1/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590349, "uuid": "5af4c9ee-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/Client.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590350, "uuid": "5b44709b-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/rkAIWKEr/win1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590350, "uuid": "5b7e4249-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/rkAIWKEr/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590350, "uuid": "5b8c0859-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/all%20file/LgGFdDAm/main.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590351, "uuid": "5c55be3b-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm3/AntiVirus1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5c75728e-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/main.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5c77c208-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/AntiVirus2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5c77f882-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/ab/alabi.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5c8077ef-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/Antivirus333.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5c9e1c77-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5cdd7849-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.87.123:41597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5ce0a710-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/rkAIWKEr/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590352, "uuid": "5ce47a2e-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/2.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d398584-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/running/rkAIWKEr/win4.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d4a039a-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/tbsh/Chrome.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d4e72d5-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/AntiVirus.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d4ed086-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/ycJOjCuR2/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d4ed3ee-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/1.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d4f6017-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/sch.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590353, "uuid": "5d5e3ce5-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/all%20file/ycJOjCuR/lamda1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "5dc27b3b-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/tbsh/Chr0me.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "5dc28572-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/main2.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "5dc3aa2f-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/AntiVirus00.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "5dc615b8-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/all%20file/ycJOjCuR/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "5dc6929a-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/me/3.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590354, "uuid": "5dc71ffe-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/LgGFdDAm/AntiVirus3.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590355, "uuid": "5e77cdd5-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.91.103/output.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590375, "uuid": "6a554b5d-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.15.64:50289/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590412, "uuid": "80bf3822-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.11.142:39919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590418, "uuid": "83c4b920-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.78.94:60797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590471, "uuid": "a37b3ce4-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.83.209:56566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590473, "uuid": "a4efc5a0-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.215.103:39810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590556, "uuid": "d69658c3-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.252.131:35104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590587, "uuid": "e8e51b09-3567-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.2.211:52251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590645, "uuid": "0b76f55a-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.38.126.75:51469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590710, "uuid": "31e8cf2e-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.214.151:56229/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590715, "uuid": "34ce873b-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.61.236:56709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590719, "uuid": "37867c21-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.191.120:40762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590728, "uuid": "3cd41e0e-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.191.120:40762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590827, "uuid": "77a1c282-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.195.36:59874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590888, "uuid": "9bf62eb8-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.116.236:57546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590947, "uuid": "bf84468c-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.223:58614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719590960, "uuid": "c6ea584a-3568-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.249.43:48893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591247, "uuid": "71e3d9f7-3569-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.228.7:50614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591383, "uuid": "c3056963-3569-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.38.126:40090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591556, "uuid": "2a93ed67-356a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.156.82.247:53504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591609, "uuid": "4a06b0b6-356a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.254:34929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591667, "uuid": "6c723b08-356a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.11.142:39919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591846, "uuid": "d7615930-356a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.184.135.85:39763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591915, "uuid": "0008c84c-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.34.52:53607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591930, "uuid": "0924d331-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.63.142:52806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719591972, "uuid": "229070d8-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.18.51:59441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592089, "uuid": "67f8555c-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.35.247.70:43276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592100, "uuid": "6e75fbe0-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.188.30:60619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592146, "uuid": "89e17e0b-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.38.126.75:51469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592216, "uuid": "b37354a8-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.83.209:56566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592222, "uuid": "b72ed57f-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.89.78:43158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592330, "uuid": "f79968e9-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.61.236:56709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592334, "uuid": "fa15eb21-356b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.69.152.115:52888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592417, "uuid": "2bd14c4e-356c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.25.134.9:54472/mozi.7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592446, "uuid": "3d0e8a05-356c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.124.79:50058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592527, "uuid": "6ccfe30d-356c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.174.205:36563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592627, "uuid": "a89f38d8-356c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.249.43:48893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592745, "uuid": "ef17f440-356c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.67.29:57282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719592868, "uuid": "382ff586-356d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.6.63:46792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593046, "uuid": "a232ee9d-356d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.246.47:52255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593046, "uuid": "a26712d0-356d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.38.126:40090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593109, "uuid": "c7e8b39a-356d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.156.82.247:53504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593113, "uuid": "ca445299-356d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.139.50:49195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593347, "uuid": "55c89904-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.96.59:45019/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593349, "uuid": "573ebc04-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.32.154:34997/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593359, "uuid": "5d0052ef-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.63.182:36882/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593408, "uuid": "7a5d999d-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.156.136:58761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593408, "uuid": "7a6d3090-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.106:54871/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593409, "uuid": "7af97b30-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.121.204:48191/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593411, "uuid": "7bc7e95c-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.111.211:35124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593411, "uuid": "7bcd3712-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.211.28.98:40984/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593416, "uuid": "7ee8e657-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.18.51:59441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593464, "uuid": "9b8192c9-356e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.173.208:49116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593648, "uuid": "096cefbe-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.91.191:34842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593707, "uuid": "2c97c7fd-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593707, "uuid": "2c9e77e8-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593765, "uuid": "4f4ca227-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk49", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593766, "uuid": "4f5e265d-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593766, "uuid": "4f63ce42-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk53", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593766, "uuid": "4fb8dd25-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:60963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593824, "uuid": "72515383-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593824, "uuid": "72548e12-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/c", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593826, "uuid": "731782a0-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk54", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593826, "uuid": "731782cb-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk40", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593826, "uuid": "7320cfac-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593826, "uuid": "73214258-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk56", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593826, "uuid": "732796a6-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593826, "uuid": "737075cc-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719593886, "uuid": "9753e157-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/chefrvmanabat/nk39", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594011, "uuid": "e16a9409-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594011, "uuid": "e170a4e0-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/c", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594011, "uuid": "e173b8ef-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594011, "uuid": "e17f7ccf-356f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02bf0ab7-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk57", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02caf913-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk56", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02d4028a-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk48", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02dbad5c-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/1", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02dbc133-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk40", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02eb289e-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.67.29:57282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "02f0c403-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.35.56/shell", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594067, "uuid": "0347909f-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk55", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594068, "uuid": "03ac7c0d-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk53", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594068, "uuid": "03cb276e-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk54", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594068, "uuid": "03e73497-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/chefrvmanabat/nk49", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594126, "uuid": "25eefada-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://meowware.ddns.net/shell", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "946f93c8-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/vBFDTx192.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "94714ff4-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/Blotlgger.mix", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "947750f0-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/CTScnFj46.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "94785167-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/Optllingen.mdp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "94793aab-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/QoNGqRlihlEHmyvHbhC131.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "947b687f-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/Wattest.pfb", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "948793c8-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/ZfdbA73.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594311, "uuid": "94b3ddba-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/kys.snp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594312, "uuid": "94c45135-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.114/cUmnYOTKQXAHNVvNjHz10.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594316, "uuid": "9788ec99-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.150:48057/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594320, "uuid": "99b58ad6-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.226.20:50606/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594325, "uuid": "9cd74419-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.161.193:32822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594426, "uuid": "d92099d3-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.6.63:46792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594426, "uuid": "d940ae09-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.139.50:49195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594486, "uuid": "fcc6942d-3570-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.127:40318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594495, "uuid": "023b75bb-3571-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.12.186:49750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594666, "uuid": "6802e3f0-3571-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.246.47:52255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594669, "uuid": "69dee023-3571-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.5.160.201/iamnigger.service", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594689, "uuid": "7590042f-3571-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.5.160.201/start", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594846, "uuid": "d3138305-3571-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.156.136:58761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594850, "uuid": "d5c5a2d1-3571-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.240:33159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594943, "uuid": "0cf78f91-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.106.176.215:33321/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594966, "uuid": "1af4991b-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.111.211:35124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719594967, "uuid": "1b321da3-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.207.19:57205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595026, "uuid": "3eda9882-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.33.234:60687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595146, "uuid": "865f4779-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.222:37679/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595160, "uuid": "8ec2cd37-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.40:33142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595227, "uuid": "b6a6dd2e-3572-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.35.44:55738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595387, "uuid": "15b2da58-3573-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.91.191:34842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595688, "uuid": "c915a8b9-3573-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.49.179:50511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719595869, "uuid": "34d6ad69-3574-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.255.69:35583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596048, "uuid": "9fbfec82-3574-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.14:46332/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596167, "uuid": "e6f2b674-3574-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.207:35426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596226, "uuid": "09d443b8-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.240:33159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596226, "uuid": "0a24b04e-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.127:40318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596289, "uuid": "2f2987f3-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.93.245:37941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596345, "uuid": "5116a019-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.150.89:51194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596467, "uuid": "99686148-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.246.28:35152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596467, "uuid": "99b5bf60-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.220:40536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596527, "uuid": "bd63798f-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.35.44:55738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596592, "uuid": "e42fa41c-3575-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.243.9:55697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596674, "uuid": "149cc218-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.188.10:60274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596766, "uuid": "4bdd30c8-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.16.171:40894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596771, "uuid": "4ed1486d-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.141:39739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596948, "uuid": "b7ff1c3d-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.249.227:41366/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596949, "uuid": "b8d8f4e0-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.111.162:32973/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596950, "uuid": "b9937c6e-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://interlimpia.com.mx/Zizrxbkxb.mp4", "Tag": [ { "name": "OriginLogger", "colour": "#fc2cae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596961, "uuid": "bfb6e2de-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.90.67:58570/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719596980, "uuid": "cb1b2cfa-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.27.57:42125/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597009, "uuid": "dccbb3b4-3576-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.8:52605/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597247, "uuid": "6a369dfd-3577-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.129:38214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597425, "uuid": "d4cacb10-3577-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.141:39739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597426, "uuid": "d543fe12-3577-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.10:61605/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597449, "uuid": "e299af27-3577-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.147.102:53991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597610, "uuid": "43088196-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.255.69:35583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597613, "uuid": "44abdbf8-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.216.70.60/Aqua.x86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597726, "uuid": "87b2ee45-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.93.245:37941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597848, "uuid": "d0b02e70-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.76.48:43424/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597849, "uuid": "d13aa25d-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.78.94:60797/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597850, "uuid": "d1f11d03-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.246.241.249:45023/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597850, "uuid": "d20f4afd-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.105.66:54271/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597851, "uuid": "d271ddc0-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.96.27:56005/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597853, "uuid": "d3a55865-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.115.215:41665/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597861, "uuid": "d83cc4b3-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.208.42:49199/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597878, "uuid": "e24c3bb2-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.14.50:44651/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719597879, "uuid": "e344a716-3578-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.28.246.31:38959/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598088, "uuid": "5fa52eb2-3579-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.199.51:59113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598103, "uuid": "68a833c3-3579-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.220:40536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598146, "uuid": "8285d45a-3579-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.194.121:43144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598146, "uuid": "828fcaaf-3579-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.194.121:43144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598211, "uuid": "a931c6aa-3579-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.243.9:55697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598278, "uuid": "d0ea8388-3579-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.202:51910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598386, "uuid": "119c35d3-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.212.46:38803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598387, "uuid": "11a40fab-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.254.22:48133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598392, "uuid": "14ec2a29-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.109.201:34161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598446, "uuid": "34e8b0bb-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.194.218:50617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598451, "uuid": "38405175-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.186.144:56476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598512, "uuid": "5c954a39-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.218.241:44102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598576, "uuid": "828ee9d7-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.14.90:46708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598589, "uuid": "8a2e96e3-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.90.63:44883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719598745, "uuid": "e77159ce-357a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.21:55630/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599172, "uuid": "e5af36ca-357b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.116:46516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599178, "uuid": "e97c9c17-357b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.138.90.233:8081/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599179, "uuid": "ea33b1eb-357b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.110.112.197:8081/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599220, "uuid": "02b50f9d-357c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.63.112.21:8081/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599650, "uuid": "02a33db3-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.141:59630/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599652, "uuid": "040e4d5a-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.199.51:59113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599666, "uuid": "0c6bc723-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.22.34:43323/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599718, "uuid": "2b26580c-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.106:39454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599729, "uuid": "31f5ffac-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.247.79:44536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599766, "uuid": "482e04a6-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.103.0:36171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599945, "uuid": "b2c96bae-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.250.8:34479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599947, "uuid": "b3921dde-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.137:53018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599949, "uuid": "b4f78dcb-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.104.134:44117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719599950, "uuid": "b59ee83e-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.129.190:46271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600011, "uuid": "da1c6574-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.218.241:44102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600067, "uuid": "fb19114b-357d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.254.22:48133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600087, "uuid": "06fefa65-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.111.87:35101/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600186, "uuid": "427df37c-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.30:57071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600187, "uuid": "42b88cce-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.230.100:37327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600187, "uuid": "42dbe325-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.235:35210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600190, "uuid": "44908de6-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.8.50:48512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600202, "uuid": "4bf1de0d-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.239.201:39978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600247, "uuid": "66d262d5-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://interlimpia.com.mx/Qffxr.wav", "Tag": [ { "name": "OriginLogger", "colour": "#fc2cae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600248, "uuid": "6728a7bf-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://interlimpia.com.mx/Ibosilyps.wav", "Tag": [ { "name": "OriginLogger", "colour": "#fc2cae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600432, "uuid": "d49f81c3-357e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.240.172:48253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600554, "uuid": "1d6c47e4-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.41:46259/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600611, "uuid": "3f694083-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.6.22:42983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "400dc041-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.131/loaded28062024.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600612, "uuid": "401d56d5-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.131/XClientx3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600614, "uuid": "41395f18-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.131/Slovakia.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600616, "uuid": "424a767d-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.131/XClient.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600618, "uuid": "43f6eb85-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.131/XClient2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600728, "uuid": "8516db21-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.192.67:39058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600788, "uuid": "a8df2777-357f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.116:46516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719600971, "uuid": "15f6df70-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.211.201:43969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601055, "uuid": "481b8139-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.185.123:38849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601147, "uuid": "7ebc21af-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.91.77.82/sauna/neste.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601147, "uuid": "7ec4017d-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.91.77.81/sauna/neste.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601267, "uuid": "c6b0f898-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.250.8:34479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601268, "uuid": "c7331c0a-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.247.79:44536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601281, "uuid": "cef5a311-3580-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.57.211.186:53081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601398, "uuid": "14e965e6-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://nexoproducciones.cl/Iajjilhvtid.mp3", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601445, "uuid": "30dc1641-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.18:49764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601460, "uuid": "396ba885-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.108.145:60052/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601510, "uuid": "57413a11-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.129.190:46271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601515, "uuid": "5a91db63-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.193:41137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601554, "uuid": "71e53a5f-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.56:49143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601630, "uuid": "9e9ff865-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.104.134:44117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601630, "uuid": "9ec59fdd-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.212.139.112/UpdateSetup.exe", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601632, "uuid": "a00a9e56-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.212.139.112/update/Resource/itemlist.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601689, "uuid": "c241fa5c-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.200.163:58855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601746, "uuid": "e4471d8e-3581-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.97.31:54898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601825, "uuid": "1332212b-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.213/launcher.apk", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601866, "uuid": "2b8eaff6-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.197.69.213/client.apk", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601926, "uuid": "4f6a62e9-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.69.152.115:52888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719601926, "uuid": "4f8159d5-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.230.100:37327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602000, "uuid": "7b2d5c77-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.228.28:43474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602046, "uuid": "96a165e0-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.240.172:48253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602177, "uuid": "e4d5f662-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.239.140:49085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602204, "uuid": "f4f8ebf8-3582-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.253.81:49551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602227, "uuid": "02fce930-3583-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.28.47.4/mine/amadka.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602228, "uuid": "033218f7-3583-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.28.47.4/cost/go.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602228, "uuid": "038e81b3-3583-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.192.67:39058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602286, "uuid": "25e19216-3583-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.6.22:42983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719602468, "uuid": "925c6e73-3583-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.60.137:59475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603070, "uuid": "f90c0c82-3584-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.18:49764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603075, "uuid": "fc7337bc-3584-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.230:33079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603127, "uuid": "1b43a9e4-3585-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.63:50211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603127, "uuid": "1b6baf9f-3585-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.27.172:44205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603255, "uuid": "67994cf4-3585-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.122.221:51612/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603264, "uuid": "6caf8912-3585-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.41:50839/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603366, "uuid": "a9f0ad1e-3585-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.164.129:47510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603666, "uuid": "5c66f30d-3586-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.239.140:49085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603727, "uuid": "8099ad11-3586-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.60.137:59475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603806, "uuid": "afb4cb99-3586-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.182.35:35461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603845, "uuid": "c711a7b9-3586-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.22.92:43732/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603861, "uuid": "d0df8f96-3586-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.20.64:57342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603910, "uuid": "ee123a1d-3586-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.106.89:39564/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719603974, "uuid": "13dd8b94-3587-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.253.81:49551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604086, "uuid": "56d0e0c2-3587-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.224.51:41504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604150, "uuid": "7cbdd714-3587-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.58.246:40415/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604210, "uuid": "a0c0a55d-3587-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.184:58793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604217, "uuid": "a4972cd5-3587-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.53.254.245:50495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604628, "uuid": "9a20fe1a-3588-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.134:40105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604744, "uuid": "df213698-3588-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.27.172:44205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604929, "uuid": "4d6558a3-3589-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.158.230:37874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719604988, "uuid": "703196ae-3589-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.avastsp.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605046, "uuid": "92e01f7f-3589-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.139.163:59177/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605047, "uuid": "93a2ead0-3589-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.105.219:41553/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605065, "uuid": "9e15ff5f-3589-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.83.3:49985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605288, "uuid": "23733bb4-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.43.157:49617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605292, "uuid": "257e206d-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://avastpst.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605292, "uuid": "25a0dc29-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://avastsf.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605292, "uuid": "25d4beee-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://avast-antivirus.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605295, "uuid": "27328253-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://avast-antivirusdownload.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605417, "uuid": "701224ae-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://avastsgp.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605418, "uuid": "70f14b39-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://avastcv.com/AnyDesk.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605586, "uuid": "d51dc02f-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.61:44216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605592, "uuid": "d84f4a1a-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.156:55228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605652, "uuid": "fc1106d2-358a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.60:40911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605711, "uuid": "1f391f21-358b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.224.51:41504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605782, "uuid": "49a38ea6-358b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.251.214:40385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605887, "uuid": "8826fb8f-358b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.53.254.245:50495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719605951, "uuid": "aea1dc22-358b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.210.250:54244/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606126, "uuid": "16825d74-358c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.216.70.60/Aqua.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606186, "uuid": "3a9a9617-358c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.233:57875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606550, "uuid": "1368385f-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.80:58459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606550, "uuid": "1368b875-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.80:58459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606614, "uuid": "39b572bf-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.61:44216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606678, "uuid": "5fd73f85-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.41.219:55382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606682, "uuid": "61f3986f-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.31:37783/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606691, "uuid": "67826610-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.71:57254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606803, "uuid": "aa178c45-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.182.231:51630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719606854, "uuid": "c8f58d65-358d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.144.78:37279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607025, "uuid": "2e83891b-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.124//go.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607026, "uuid": "2f5e9029-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.112.10:36862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607086, "uuid": "52dffd6e-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.13.95:57692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607113, "uuid": "62ed0012-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.19:8000/Sorillus%20Rat%20Cracked/Sorillus%20Rat%20Cracked/Sorillus%20Rat%20Cracked/Start.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607143, "uuid": "74e95879-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.19:8000/Crax.zip", "Tag": [ { "name": "craxsrat", "colour": "#41d025", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607210, "uuid": "9c915b84-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.19:8000/new.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607210, "uuid": "9cef8391-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.97.31:54898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607302, "uuid": "d3d36246-358e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.19:8000/CraxsRat-V7.4-Cracked/CraxsRat.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607386, "uuid": "05ce57a4-358f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.124.124:48942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607566, "uuid": "713ce4a7-358f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.60:40911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607746, "uuid": "dc87831d-358f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.19:42170/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607747, "uuid": "dce1bfb2-358f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.248:34301/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607749, "uuid": "de08db6f-358f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.37.65:42453/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607759, "uuid": "e4353e07-358f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.89.233:55008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607809, "uuid": "01fd93d6-3590-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.233:57875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607815, "uuid": "054e80f9-3590-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.61.206.73:49446/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607816, "uuid": "063be355-3590-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.46.137.63:47480/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719607987, "uuid": "6c186021-3590-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.178.81:57097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608227, "uuid": "fb18175c-3590-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.22.99:47690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608467, "uuid": "8a3e63f8-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.182.231:51630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608525, "uuid": "acc59ccc-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.144.78:37279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608526, "uuid": "acf9403c-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.13.95:57692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608586, "uuid": "d0e8917d-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.20:44126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608647, "uuid": "f517b70e-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.122.88:57528/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608647, "uuid": "f530dacb-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.76.29:49006/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608647, "uuid": "f536d152-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.211.27:59745/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608647, "uuid": "f553d1c6-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.148.93:50064/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608647, "uuid": "f555df3d-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.105:56281/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608647, "uuid": "f5561ea7-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.252.182:55541/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608648, "uuid": "f621d53b-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.112.41:32825/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608651, "uuid": "f7ac1c07-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.147.233:50213/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608651, "uuid": "f7b43bbd-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.34.21:49273/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608653, "uuid": "f8a94fec-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.91.0:42904/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608663, "uuid": "fedda459-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.217.175:33027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608664, "uuid": "ffa3a663-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.222.37:41123/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608664, "uuid": "ffa49d8a-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.235.81:44707/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608665, "uuid": "fffd9cca-3591-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.143.127:56878/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608665, "uuid": "0041f3c3-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.0.64:38885/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608674, "uuid": "05afaeb2-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.138.109:48700/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608679, "uuid": "086c90f5-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.5:40099/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608680, "uuid": "094fa319-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.138.12.146:49797/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608683, "uuid": "0ad30aa8-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.138.12.196:58966/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608778, "uuid": "434cf1b9-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.110:48149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608826, "uuid": "5fcbfe44-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.83.34:56324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608945, "uuid": "a7045f69-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.171.212:45183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719608954, "uuid": "ac239765-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.55.203:51948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609012, "uuid": "cebe7211-3592-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.251.69:42357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609128, "uuid": "143b633b-3593-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.210.135:50809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609247, "uuid": "5ac23c8c-3593-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.200.94:48051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609367, "uuid": "a2510a6f-3593-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.234.217:47616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609547, "uuid": "0dc1ad84-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.247.102:46824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609552, "uuid": "108656a4-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.67.95:43426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609561, "uuid": "1657509a-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.34.200:34145/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609564, "uuid": "17e4e97c-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.131.133:37954/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609608, "uuid": "32714c9a-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.22.99:47690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609785, "uuid": "9ba46c12-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.24:39563/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609909, "uuid": "e555b778-3594-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.162.76:40686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719609966, "uuid": "07a30ef8-3595-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.52.212:37388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610027, "uuid": "2c03c07a-3595-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.214.31:37217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610156, "uuid": "78dfcd35-3595-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.147:38361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610212, "uuid": "9a6100d3-3595-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.210.135:50809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610213, "uuid": "9af4c1ea-3595-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.20:44126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610332, "uuid": "e1c15bd1-3595-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.167.178:47804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610447, "uuid": "26851ae2-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.20.6:38864/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610465, "uuid": "31117b5e-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.94.210:56939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610510, "uuid": "4bc4348c-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.146:43731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610510, "uuid": "4bed101d-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.224:53551/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610566, "uuid": "6d70cb24-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.110:48149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610745, "uuid": "d80dc3ce-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.83.34:56324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610809, "uuid": "fe511598-3596-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.244:38187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610988, "uuid": "6884c762-3597-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.200.94:48051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719610999, "uuid": "6f14f388-3597-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.112.56:37501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611047, "uuid": "8bacaeef-3597-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.247.102:46824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611047, "uuid": "8bf95422-3597-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.234.217:47616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611112, "uuid": "b2db096d-3597-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.150.44:43789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611226, "uuid": "f6d8f6f3-3597-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.57.24:33218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611356, "uuid": "43f19a11-3598-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.80.134:52265/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611411, "uuid": "64b04f9d-3598-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.247.147:33978/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611546, "uuid": "b58148b9-3598-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.131.229:52572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611586, "uuid": "cd05f606-3598-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.191:40181/mozi.a", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611591, "uuid": "cffdcc1c-3598-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.167:45174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611646, "uuid": "f10662cc-3598-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.162.76:40686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611709, "uuid": "168ae708-3599-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://ihox.partners.gloriadeicr.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611827, "uuid": "5c862715-3599-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.43.69:56013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611887, "uuid": "8083a0ad-3599-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.214.31:37217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719611917, "uuid": "92333776-3599-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.214.5:54546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612068, "uuid": "ec4d229f-3599-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.233.135:40890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612082, "uuid": "f4b0c6ce-3599-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.194.211:40690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612127, "uuid": "0f6fd452-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.167.178:47804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612250, "uuid": "58cd6e7f-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.65.174:33377/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612260, "uuid": "5edf38fc-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.245.152:52395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612366, "uuid": "9df5348e-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.100.208:59554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612368, "uuid": "9f64eaab-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.227.114:43254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612427, "uuid": "c25ba156-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.213.55:47388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612443, "uuid": "cc13ca50-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.108.84:42667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612486, "uuid": "e5d1fc9c-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.251.69:42357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612487, "uuid": "e641333c-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.94.210:56939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612492, "uuid": "e8fe1f00-359a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.251.145:46100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612694, "uuid": "618b4134-359b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.112.56:37501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612726, "uuid": "746e1e44-359b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.57.24:33218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719612910, "uuid": "e242994b-359b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.252.131:35104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613026, "uuid": "27b9bf2a-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.58:41378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613115, "uuid": "5c55ac5d-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.113:50258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613150, "uuid": "715acae4-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.167.113:53685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613211, "uuid": "95817b2a-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.9.11:46963/mozi.a", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613266, "uuid": "b6b209b9-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.154.88:42269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613283, "uuid": "c09e3ab9-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.173:41576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613386, "uuid": "fe41b3a9-359c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.200.169:60122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613510, "uuid": "47ea4d0c-359d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.43.69:56013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613513, "uuid": "49fb87c5-359d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.200.157:47734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613704, "uuid": "bbcb3258-359d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.45.204:32981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613780, "uuid": "e8fe52de-359d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.246.195.104:48471/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613817, "uuid": "fea4e0d8-359d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.100.208:59554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719613990, "uuid": "65e2423e-359e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.60.181:60768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614054, "uuid": "8bf796c7-359e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.137.85:1146/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614119, "uuid": "b30520a2-359e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.127.228:56844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614346, "uuid": "3a2dbf46-359f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.200.157:47734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614347, "uuid": "3a9681f6-359f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.108.17:44146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614410, "uuid": "6078d622-359f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.189.169:49438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614479, "uuid": "8957ae23-359f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.135.13:36133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614646, "uuid": "ecf55973-359f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.167.113:53685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614723, "uuid": "1ad0bd5e-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.60.166:49749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614773, "uuid": "38fba616-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.113:50258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614830, "uuid": "5ac6032c-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.58:41378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614946, "uuid": "9fef1985-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.152.104:44673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614952, "uuid": "a3a2a116-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.39.180.131:55372/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719614977, "uuid": "b22a1a2d-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.76.159:45844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615077, "uuid": "edace509-35a0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.103.53:56063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615126, "uuid": "0b3f7f96-35a1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.12:59459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615130, "uuid": "0d42bdc1-35a1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.42.97:36050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615309, "uuid": "786b7ea8-35a1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.239.171:55529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615370, "uuid": "9c620f8d-35a1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.45.204:32981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615427, "uuid": "be74e7f7-35a1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.98.151:53602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615611, "uuid": "2c23beff-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.237.83:46116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615613, "uuid": "2da9cc73-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.197.240:47935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615799, "uuid": "9c33b57f-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.53:34395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615847, "uuid": "b8b1d870-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.43.91:60839/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615847, "uuid": "b8fd92e3-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.52.212:37388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615847, "uuid": "b905919c-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.127.228:56844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615870, "uuid": "c6cd6ecc-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.117.90:52990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615910, "uuid": "de2d232c-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.232.34:35512/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719615910, "uuid": "de56abc8-35a2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.227:38739/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616027, "uuid": "2441685f-35a3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.60.181:60768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616086, "uuid": "477e3818-35a3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.189.169:49438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616089, "uuid": "496f37d5-35a3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.150:58065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616097, "uuid": "4e18e29c-35a3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.95.162:55406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616271, "uuid": "b5b14f57-35a3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.240.223:57907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616356, "uuid": "e857c008-35a3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.36.104:52021/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616446, "uuid": "1dfff381-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.76.159:45844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616634, "uuid": "8e0935c4-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.221.241:40924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616693, "uuid": "b165e0ef-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.42.97:36050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616747, "uuid": "d1335a20-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.102.248.148:49557/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616747, "uuid": "d1475036-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.199:55104/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616809, "uuid": "f63bea28-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.103.53:56063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616814, "uuid": "f977444e-35a4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.169.43:60757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616958, "uuid": "4f5e232f-35a5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.160:59580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719616986, "uuid": "5fb97068-35a5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.98.151:53602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617153, "uuid": "c3980401-35a5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.252.229:59351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617169, "uuid": "ccd15ea6-35a5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.16.5:38593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617230, "uuid": "f12d3f98-35a5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.243:40368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617361, "uuid": "3f964719-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.182.184:60235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617432, "uuid": "698b57ef-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.10:50815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617438, "uuid": "6d1cdc38-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.153.196:49346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617479, "uuid": "85cde2b8-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.177.213:45454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617486, "uuid": "89b9126b-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.40.135:43536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617539, "uuid": "a92df63a-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.200.199:59471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617648, "uuid": "ea8ccb3f-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.95.162:55406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617653, "uuid": "ed43edc9-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.187.81:33010/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617660, "uuid": "f161f842-35a6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.129.87:39241/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617772, "uuid": "345d966b-35a7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.9.218:56797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617893, "uuid": "7c5ff7c9-35a7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.153.196:49346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719617946, "uuid": "9bcb8852-35a7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.150:58065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618015, "uuid": "c5106d76-35a7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.56.151:44768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618187, "uuid": "2b5d7316-35a8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.170.138:42629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618378, "uuid": "9d96d618-35a8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.155.254:57014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618426, "uuid": "b9fa6888-35a8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.26.59:40301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618560, "uuid": "09fdd4ab-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.242.150:57294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618609, "uuid": "273ebc1f-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.160:59580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618620, "uuid": "2d8dfbeb-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.253.87:41252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618629, "uuid": "3338b9be-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.64.176:51086/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618727, "uuid": "6d43540d-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.243:40368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618786, "uuid": "90d37a8c-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.16.5:38593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618852, "uuid": "b801cf09-35a9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.74.112:37636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719618982, "uuid": "05696770-35aa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.219.127:44527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719619026, "uuid": "1f81ddc9-35aa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.19.31:34632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719619026, "uuid": "1f900690-35aa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.222:42512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719619027, "uuid": "2061fae0-35aa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.182.184:60235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1719619088, "uuid": "44dfe03b-35aa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.161.225:60366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585908, "uuid": "0409c706-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.117.27.115", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551044, "uuid": "d789b3f1-350b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.189.82.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585940, "uuid": "16e9ae42-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.214.192.147", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572585, "uuid": "ff01fb46-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.124.121", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719614045, "uuid": "871494f1-359e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.137.85", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553026, "uuid": "74eff5bb-3510-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.188.79", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719582844, "uuid": "e1a54938-3555-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "100.16.168.239", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554164, "uuid": "1b1c4f24-3513-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.58.214.125", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585908, "uuid": "040944b9-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.53.15.17", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585999, "uuid": "3a4e696a-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.53.15.18", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585908, "uuid": "040938e6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.53.15.54", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719578465, "uuid": "af61f0cc-354b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.162.20.166", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719572467, "uuid": "b828d0e4-353d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.190.81.204", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719613744, "uuid": "d3880246-359d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.246.195.104", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719532985, "uuid": "cb32450b-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.246.195.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719565385, "uuid": "3b67f215-352d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.246.195.190", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597845, "uuid": "cec26061-3578-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.28.246.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585908, "uuid": "03d75c25-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.77.246.53", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543784, "uuid": "f00ea7c6-34fa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.104.48.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562144, "uuid": "af9a6590-3525-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.109.111.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588614, "uuid": "50a64aba-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.154.232.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719591544, "uuid": "2332f459-356a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.156.82.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719544384, "uuid": "55c4b934-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.4.243.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719583024, "uuid": "4cc179da-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.189.2.172", "Tag": [ { "name": "botnet_config", "colour": "#b45e12", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585544, "uuid": "2b05a7d0-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.189.29.207", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562985, "uuid": "a482bf6c-3527-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.161.0.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585908, "uuid": "03de90e6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.190.171.149", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585988, "uuid": "335946b8-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.143.54.213", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554584, "uuid": "15843578-3514-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.243.29.221", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719584708, "uuid": "38cf497e-355a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.101.208", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543907, "uuid": "396614ce-34fb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.142.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719593344, "uuid": "5456faa7-356e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.63.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719571744, "uuid": "099cf482-353c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.138.179.16", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586002, "uuid": "3c255ba6-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.160.129.229", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719544508, "uuid": "9fd1c3bc-34fc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.2.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586207, "uuid": "b63160dc-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.214.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719577744, "uuid": "01915b3e-354a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.249.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719594965, "uuid": "1a0a93a8-3572-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.207.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719607084, "uuid": "51da3f3d-358e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.13.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592327, "uuid": "f62f4362-356b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.69.152.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719565385, "uuid": "3b644072-352d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.77.225.194", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585909, "uuid": "046ebdb0-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114-34-248-97.hinet-ip.hinet.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719586001, "uuid": "3b1e084e-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.34.248.97", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719556144, "uuid": "b749f3ac-3517-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.42.54.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719554584, "uuid": "1586493f-3514-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.44.107.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719613264, "uuid": "b55c6094-359c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.46.154.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719542226, "uuid": "4f7dc2e4-34f7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.155.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719588844, "uuid": "da21c838-3563-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.235.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719551107, "uuid": "fcd48841-350b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.29.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719547325, "uuid": "2e8c401d-3503-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.218.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719567246, "uuid": "90b4e1e7-3531-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.22.134", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719541144, "uuid": "ca4f9e0c-34f4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.236.76", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719600608, "uuid": "3dfbf96f-357f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.6.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719549014, "uuid": "1d631ddc-3507-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.7.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592865, "uuid": "36b15fcb-356d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.6.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719593344, "uuid": "545702f7-356e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.96.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719587344, "uuid": "5bbfa2c3-3560-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.2.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719556568, "uuid": "b40e33a0-3518-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.240.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608224, "uuid": "f9076dd1-3590-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.22.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612364, "uuid": "9cbd9afd-359a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.227.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719581285, "uuid": "400e81d3-3552-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.231.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719543244, "uuid": "adfb5bad-34f9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.238.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719597845, "uuid": "cec26546-3578-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.96.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719557044, "uuid": "cfc768cd-3519-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.146.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719618007, "uuid": "c072c4ec-35a7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.56.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719539524, "uuid": "04edad92-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.14.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719545946, "uuid": "f89446ea-34ff-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.84.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719608644, "uuid": "f38b6d52-3591-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.112.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719579966, "uuid": "2de3b918-354f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.19.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719561908, "uuid": "22ab0514-3525-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.10.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558010, "uuid": "0f4374d5-351c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.176.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719599165, "uuid": "e17bd39e-357b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.110.112.197", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719538566, "uuid": "c9e97fdd-34ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.87.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592387, "uuid": "196bdb33-356c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.25.134.9", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719585998, "uuid": "398fb325-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.58.62.74", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719558245, "uuid": "9b397b4a-351c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.141.249", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719553744, "uuid": "20c5e208-3512-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.107.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719612424, "uuid": "c0c537ed-359a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.108.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719532985, "uuid": "cb30ee1f-34e1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.129.114", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719609544, "uuid": "0c336f52-3594-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.131.133", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719539764, "uuid": "93bf6fdc-34f1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.138.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719592508, "uuid": "61b4988e-356c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.174.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719575524, "uuid": "d664de70-3544-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.175.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719533884, "uuid": "e2f23ecf-34e3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.142.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719548584, "uuid": "1d4a13f8-3506-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.173.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1719562985, "uuid": "a4834c28-3527-1