{ "Event": { "published": true, "date": "2026-01-06", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-01-06", "timestamp": 1767744924, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "5fdea1ed-f78a-45bb-965b-f9b3b150a157", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1767657731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767657731, "uuid": "8f741fe0-2743-46ab-abef-2ed53d251efb", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767657731, "uuid": "c3caa80b-919c-4ed1-82c9-1be24350f1e5", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767657731, "uuid": "fe69cb8e-1a21-4da1-95fe-13b3212e9f8b", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767657731, "uuid": "053d22c7-85cf-4f23-94b8-2e0e312bc3d8", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767657731, "uuid": "adf1b3a9-4cb5-4236-b32c-b96123b5f54d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1767657855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767657855, "uuid": "35dff28c-6b54-4893-9648-779d82d4d60d", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767657855, "uuid": "dc9da944-143a-4f5b-b681-f5bd7a1e21dd", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767657855, "uuid": "b3dbcbae-b029-462a-a695-a25c136985a9", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767657855, "uuid": "45bad164-6cbe-4274-97f5-70805741bde8", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767657855, "uuid": "4db45bd6-f2e5-47b7-a501-6f4fd22b9a01", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fc4021b-ea94-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767658208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658208, "uuid": "4ecedc14-e529-4cad-abee-c7b13a5fbd4d", "comment": "Malware payload", "value": "97348f219723a4af9da409aa592b1bca", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658208, "uuid": "f873f6a4-95d6-44a4-9421-5cdebee8a81c", "comment": "Malware payload", "value": "7a09f8979f1c1acee848d8f5e316d285ac6805da6ba9ee276fca948e79b87e63", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658208, "uuid": "24ee1ecd-b256-45e9-8e4d-9c0ff8e07fca", "value": "T1CBC63368A26084DDF8E3D23B694150D2B7F2B4245B31CADF07A852993F57BF24D3CA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658208, "uuid": "7cd7458b-d0fe-4cad-be1f-76b45830c234", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658208, "uuid": "8f32ec16-8136-40e7-9ff1-d8dff9e11a76", "value": "196608:5dUhg+2gTSJIeRo+jFgaIAjNyMzEltbW897GGr1LDsBTG9WdvWQ4a/R6:52g+4uSfdjcMo1N3sB15WQzA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658208, "uuid": "d9a2742a-39aa-4b8d-8870-a81691ba2ff3", "value": 12226119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658208, "uuid": "d7d334b9-e0b5-4afc-acbb-89f8b57d2f57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ceac48d-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload (Ransomware.GLOBAL)", "timestamp": 1767658794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658794, "uuid": "a17c0ece-563f-4c09-8339-3e470e1e9d7c", "comment": "Malware payload (Ransomware.GLOBAL)", "value": "324f0a679e2dd7d4174fc77e882336bf", "object_relation": "md5", "Tag": [ { "name": "GLOBAL", "colour": "#3a0765", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658794, "uuid": "f84c31fb-ee09-4c7e-95dc-b9a894526a5c", "comment": "Malware payload (Ransomware.GLOBAL)", "value": "99ed96d48e99828077d807f342cf13244af232c190088f12f548199a8ece8d97", "object_relation": "sha256", "Tag": [ { "name": "GLOBAL", "colour": "#3a0765", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658794, "uuid": "7739ecd0-3d4d-469b-9cfe-dcf6e379b9f8", "value": "T101347C30BBD28431F5B75A721979A7764C3E38270B31DACF9790096AE9306C18B35B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658794, "uuid": "190c1b1f-fbe5-47ef-9b84-98c552582248", "value": "934cf7ece072cb192e6f1696c5852040", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658794, "uuid": "2f3d8c36-8829-4fbd-afa2-c6bfe377b92f", "value": "6144:nMQQtXosqtZFnEsPB5TWAZ1OaHjdbOu9/H9:MQQBMLEi+AVT/H9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658794, "uuid": "d1dd00a5-45a1-4835-8b7c-7e83c918d474", "value": 240128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658794, "uuid": "092c6f63-d9c5-48b9-95a9-7f6bb5659ad2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36b1913d-ea8e-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658834, "uuid": "3810b9ae-96d3-4ef4-b526-f3a4321d6c37", "comment": "Malware payload (Mirai)", "value": "d74415ab3b7444c2d74a33179186ae49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658834, "uuid": "169e5de8-9e96-4961-866f-af64af489fb7", "comment": "Malware payload (Mirai)", "value": "244b44d469e878f9fea969454756699916e94e9107104959d5e609c1eb71f3ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658834, "uuid": "cb4d3083-6a95-4416-bc49-e421f77558be", "value": "T1AA230944B8819A23C6E4137EFA6F018D372563B8E2DF7217DD215F15778A82B0DBB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658834, "uuid": "6ec2d7e2-93f0-4464-8d06-47d5405072dd", "value": "768:Kj8RssntlMUJkLjrLIJ+QeuI2M/cGq04syI7Nmd2H/Cou:/RvnyLIoQ38/cv05yISqu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658834, "uuid": "059ae606-97f3-4982-9333-6ffd9104d1f6", "value": 50044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658834, "uuid": "8eb92e44-a5f7-479b-9d09-549bb216fc28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84d2044a-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658834, "uuid": "e376c176-22e1-46fe-9418-f11de73731a7", "comment": "Malware payload (Mirai)", "value": "337740a9f3901536f92d4b2b15cacd91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658834, "uuid": "62a5ccb5-d5c5-4bd5-9752-1b1bf8d14ae2", "comment": "Malware payload (Mirai)", "value": "0c48f0371708c2208ef58b46bb767a3838c9acd7085ee4a85e554dbf39faa066", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658834, "uuid": "37abca91-351c-4e21-bc8f-48c3b7b4fca2", "value": "T13C43F945B8918B25C5D412BEFA2E118D3323677CE3DFB212DD105F15778A92B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658834, "uuid": "c713e630-91f5-44f6-931f-59349db6d13b", "value": "1536:ktnqGoEOelqgAUWbtscRqgsKDPD0IZi1NL9/xKuD:WFl9atPRqLK2NL9/xKuD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658834, "uuid": "4dcf8ccc-e724-4a5f-848a-0e3228e425f5", "value": 59988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658834, "uuid": "a2c7d0e4-90d2-473c-b3c3-91b99f40803c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f94cf5bc-ea86-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658849, "uuid": "6d871b14-810c-432c-9884-12a74e617f1b", "comment": "Malware payload (Mirai)", "value": "b95a16a34b38ae4e6a2b56b6221f9e06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658849, "uuid": "bf589325-1325-4ef0-8764-4506258c0b52", "comment": "Malware payload (Mirai)", "value": "8a087d018e03e99bf2301872350738b6624d3d351e3c6f3540e1de6da4590353", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658849, "uuid": "088e7aa7-2126-4ba8-89be-80b886cab418", "value": "T151635B21B97D2D1BC4C4A47A11E74334F1F21B4B36A8CA6E7D720E8EFF60A542117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658849, "uuid": "690b8804-861b-42c3-a8fb-b3b99bb5a9b4", "value": "1536:BMWSgJZB8g9+5wbeZewSla92Rhi5Pzf0M5jhTSmEebch/:WHID9dqTCMrfTSmEebG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658849, "uuid": "5b3727a0-95ee-4f6c-9a61-1432d671cdb7", "value": 68968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658849, "uuid": "3877cc3a-753e-48ff-abed-8ed95f8d1a12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0678a77-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658907, "uuid": "f08ae47f-52ae-48e6-bb3f-c8d38165ee5c", "comment": "Malware payload (Mirai)", "value": "e979cfedc6b995c6c87b5cd0633e194c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658907, "uuid": "c6230d59-ffd8-428c-9751-88e25e288ca1", "comment": "Malware payload (Mirai)", "value": "6fbcb4518077ee6d9d7aaf141f510fa5f3891c256b042b91abaab7c74ad7df47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658907, "uuid": "2407a2c5-efe4-44a5-834b-af637d86783b", "value": "T1FE1329C59E83C8F1EC0A0976147BF73216F5E5795078FA9BDB95E931AD12302B20A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658907, "uuid": "dfd9b4d7-5f1c-40e0-ad98-32ce8427de36", "value": "768:gcZi+Fr7TgboQpAK7JC3KBS6+SpO6GdIEOx/BL5OQYR:RoITeoQ2KC3cB+SzGdIEONp5OQYR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658907, "uuid": "0d18a243-2f81-4365-b3ae-1fa5452cd917", "value": 41600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658907, "uuid": "281bb6c4-0f8d-446f-a3cd-adac69c789d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc8391d7-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658928, "uuid": "88790900-5303-44fd-b334-9a528579a730", "comment": "Malware payload (Mirai)", "value": "e3dea3d34da37628ed5d874727668c52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658928, "uuid": "fabf2006-9015-4a89-ad40-e53ea4d90741", "comment": "Malware payload (Mirai)", "value": "c753c26ad689567bf9275ff3c949e2a5a8c477f5e57d6ea11403bb06c9fe4376", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658928, "uuid": "d12ccc53-5e01-445d-b141-2ecc649cd8db", "value": "T1BD83D705BB254FB7DC5FCD374AB95B0429CC960A31A83B7A7930D818F25B24F59E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658928, "uuid": "fca4bed6-83e4-4317-9270-a626a38980a5", "value": "1536:ysDG+OPEBy1uY/O3jh0H5y9WyT3jVuO0FpoMOnbO5yMHeur7RR:ysq+Osy19/WhWy99tmPeurj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658928, "uuid": "6a83ba43-e936-4fd5-ab4f-bd9589ab33b3", "value": 87020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658928, "uuid": "24c54322-c8ff-45bf-b578-75a92bc97446", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7127116-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767658972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658972, "uuid": "ba9d0ab4-d58c-4fac-9105-0ffc5b160fd7", "comment": "Malware payload", "value": "91632c4e56d273a94fa8304c3cb75ca6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658972, "uuid": "50b855c7-2cac-4832-a227-b0bccbdfd6b2", "comment": "Malware payload", "value": "3718927c7816e48eb0d6274b9979197c2caa20b4dcfae834a4a065ace70a2012", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658972, "uuid": "d0ff2f0e-861f-44f4-94d5-81e6137fd51f", "value": "T1A792C013468FBFB46B835526CC5E578A748788AAB038102A1F8C716879EA3741F2F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658972, "uuid": "33032906-29a1-4012-8f80-46d0ac71c3df", "value": "384:cqiVjNHoEUkia0sP4DVWTPwHtjIfTwJaQJ0fSoB/a9GuPUJj5OI77U:cqmJ9zihoDsyfmaQWZCnq5OIU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658972, "uuid": "a1e293a7-4d27-4572-8df9-ab4128d0c3f5", "value": 20224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658972, "uuid": "d39de7e9-1fa5-4e95-9880-e5c4e551fbb8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc0ebc7a-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658981, "uuid": "b1b8295d-ace3-4b16-af74-ad7e6454357c", "comment": "Malware payload (Mirai)", "value": "9c985f4cbb8fd78859c5de34cd266972", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658981, "uuid": "548c1d45-8d70-4adb-a6ba-28be73b95011", "comment": "Malware payload (Mirai)", "value": "4b00825c4a597557b2abec74c5a03434fd226563db5f779871d5b7a79b60fe40", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658981, "uuid": "343736d6-2684-4608-b56a-ebfcc9ec6e37", "value": "T12713E889BC95CA56C6C55177BF0E42CC372603A8E2EE73439D19AF66765F82B0E3B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658981, "uuid": "0732d5fb-0348-4399-a4dd-068a98126336", "value": "768:45xHpB3rNqW2gFynNIEmNThd8BipeAJtxnvJur7R:8HXdFAuBh18Khur7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658981, "uuid": "255697fd-f9c2-426f-95c4-1b0981bbfbed", "value": 42836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658981, "uuid": "0cb583d1-1c49-48b9-a9c3-7efaae2f6acf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc9d0af8-ea95-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767658982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658982, "uuid": "c1172368-12cb-4f3c-a3b6-b0b22c52599f", "comment": "Malware payload (Mirai)", "value": "6dd25f93be08af566b598ef1355ddfc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658982, "uuid": "6d047081-f1ff-41d5-9203-858b126a9c6e", "comment": "Malware payload (Mirai)", "value": "61230b763066a11fa837162bba2aaaaaef0bc62baec876d161b7eaa0cefc79b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658982, "uuid": "bc2cca00-4822-4e65-8dad-c2777b48cad2", "value": "T1EA337D6BC5B9EDE8D18C45B4A8228AB42B93B204D6171EBB1E85C9654043EBCF60D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658982, "uuid": "8ba3e58e-0be1-4886-ba7d-eb1c1d7847fe", "value": "1536:IafwtSv1o0ZemEdMkkT2kQUEzAiCl2up7R:IIP1l14MkkT2uEzAijup", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767658982, "uuid": "c37d3479-49b3-4620-8398-f482b31394ce", "value": 54136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658982, "uuid": "808f2010-d089-4696-9ff5-6b8e20cfc439", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c632a2ab-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659005, "uuid": "65a02118-02e0-4bd1-aafd-5ac71e970bfc", "comment": "Malware payload (Mirai)", "value": "d77d4032da2d78f99a124d86fcacdbe7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659005, "uuid": "daa1ef40-f7c5-4fa2-9bc6-053c639d10a7", "comment": "Malware payload (Mirai)", "value": "22c33371473cdacafdf40871addc7c621fa4f8c4030ff5c40daeb525b266f14f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659005, "uuid": "34c2e9bf-868d-4562-99ad-87caa198e337", "value": "T1BA73E946BC918A66C6D552BEFA2E118D331357B8E3DF73139D106F24778A82B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659005, "uuid": "e188de56-ad19-4dab-8ec7-ad8ea244b088", "value": "1536:2RnpJFPAqwJ14MOq6q7soVHwezaNoGZC273tMHi0KMMhkaur7R:2VAJ6Mj6q7TVHwezaNo5KMMhkaur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659005, "uuid": "69e642c9-4c22-4f2a-b468-26b15d47580e", "value": 79032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659005, "uuid": "248ab559-e4de-4505-8382-54961daf7380", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d68d7897-e710-11f0-a6da-82aee05be84a", "comment": "Malware payload", "timestamp": 1767659037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659037, "uuid": "71559b05-e1d2-4630-b29c-a8c311a3a939", "comment": "Malware payload", "value": "45c7903c3dec51be3882010fb2f40275", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659037, "uuid": "50bec5b7-fdae-44a5-8c6d-c28284f6e0a3", "comment": "Malware payload", "value": "9036a72d497d8f279ba17f31302cba03daa363d1979fe7834d1918ba084e1f58", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659037, "uuid": "284a8ffc-a1ea-4b02-812c-2318814776b0", "value": "T1A4033B2B21BB20210523A05DB687776931351167FB42C9E63DAC8071AFE7DD2EB735", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659037, "uuid": "6ecf2231-5e2b-4c75-bc70-c250e39a8537", "value": "768:CDSlf60p192bdWkkg1kVpA3EHkV7kV3kV93pkVskVA2kVRkV4kVPkVcQlVGIEGJj:UUf60p1wbdWkkg1YpA3EHY7Y3YdpYsYa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659037, "uuid": "232c3c46-ef35-4995-a3d4-06530d3c9c3b", "value": 39559, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659037, "uuid": "8bccf16c-77b5-47be-90c0-a31ed21d130a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10824d02-ea96-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659069, "uuid": "f341e040-c8d9-4ce8-87c7-4e754f6eeb45", "comment": "Malware payload (Mirai)", "value": "9293796b4ac40f21575c494d9995f57c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659069, "uuid": "ccc88f05-4ece-46db-8973-afa9c4281957", "comment": "Malware payload (Mirai)", "value": "63b39477f1d244c1298c088803bcfaa2794013b52c4a8f5c7be729f3269c3b38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659069, "uuid": "b1f004e9-6f08-4a52-93ff-44ea159ed184", "value": "T19783B71A7E22DF6DFB68863587B78F30D798239226E0C641D16CF9045D6434EA41FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659069, "uuid": "02113680-e5b1-4d0b-b072-450d272e47a9", "value": "1536:qpzqc2hc1Cp9j7hNxq+BlpYi5DUYo9fSTc/Tl9/TTmGUKFFxkur7R0wr:8qhhh3q+CixovUKF7kurxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659069, "uuid": "23e44f27-b18b-4f05-88ea-3897e2646916", "value": 85132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659069, "uuid": "4210aa07-5947-4426-8003-c27a855fa2b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4106ef31-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659188, "uuid": "41611c04-e0e4-4476-a084-275699232ed2", "comment": "Malware payload (Mirai)", "value": "36b69f6658068e8160a024b796761857", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659188, "uuid": "022c8ddd-d8ec-4a66-8319-644eb531aac6", "comment": "Malware payload (Mirai)", "value": "88f5fb6f55eb500a04d9936553075c3317251ae495ddc8a5cc338052ad4a33b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659188, "uuid": "efd7a949-cd5a-425b-b0c9-7f50c5e0722f", "value": "T13F533BC9BA03D8F4EC1905752472F7325632F5761034FA9BEB94F936A853712F90A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659188, "uuid": "24d6abef-cc96-4300-a14c-88da628e0565", "value": "1536:bHMP5pNUfhS0q2DBG2X/LdktlaARuWiE7hZFInKL0rStYR:bHMxvUfhS92DX/LolaARubE1sKoet", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659188, "uuid": "801b83ba-a6bd-4a33-8702-54c0997ace63", "value": 62096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659188, "uuid": "369ef135-3afc-4dbe-93d4-6bc103c4a656", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8992f61a-ea96-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659272, "uuid": "68499ebb-f270-4923-b391-c96c95e2507d", "comment": "Malware payload (Mirai)", "value": "c046898ef01d9768a0080f62892a92a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659272, "uuid": "0129e367-3465-4852-87ff-39b91e7be589", "comment": "Malware payload (Mirai)", "value": "66d07a3fd1dca4b6be646f74cca228674978489fce11f0b35c5732ec956cf499", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659272, "uuid": "6c73e830-67ff-4bd1-853e-230376aae368", "value": "T1CE536E4232084A57D1E60AB02D3F1BF193FB99A021F4B7C9654FAB598276E331486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659272, "uuid": "fd62d46f-8597-4f31-a633-31bc319c27d7", "value": "1536:bPkQGUS+cxUfe/7z0YmYy9CD0Bz+oeF/vur7R6:Ef/XS9ioeFHuro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659272, "uuid": "0d129050-2ed0-4676-92e7-12a450fb0130", "value": 66528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659272, "uuid": "56dfac4d-787f-413e-93c9-320695c117f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de107638-ea96-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659414, "uuid": "821ff867-dbd0-4982-9dca-8b41064db64d", "comment": "Malware payload (Mirai)", "value": "16a99a273c138e76b431efe493527bbc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659414, "uuid": "bcb24d38-74ad-402d-ad93-93e9c102021c", "comment": "Malware payload (Mirai)", "value": "193bc938c8ca7840c8ce786c10c07ee30c0f881fa4b4803aa70e4f9c5eee5ffb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659414, "uuid": "44d0f494-2b23-4d6a-89cd-8fb4fe79a0ad", "value": "T1F753F945BC81D627C6D462BBFA5E41CC332623A8D2EF7207DD11AF15778A82F0D6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659414, "uuid": "c43ea494-978f-4407-b8cc-22db3aafb875", "value": "768:otPIu/akza5o9prI4XfME6tOyWhSvS4fKdx45imXOuNmd8H+68up7R:WAuCkRfMFtbuSvS4YxcimXODlup7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659414, "uuid": "fa8cbcf1-b20e-4bf2-9259-5d753b68e008", "value": 62332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659414, "uuid": "70eca329-df96-41ec-92a1-504df94475ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "639813a0-ea84-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659414, "uuid": "c03b2c23-528e-4f66-93d4-8911ecdd1961", "comment": "Malware payload (Mirai)", "value": "8c564497162a99525223c19c5d2d6c00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659414, "uuid": "e3547eea-9902-4745-a9c7-aa4ef6d515f3", "comment": "Malware payload (Mirai)", "value": "5d8280632b360284b5e2561d105298350a79c1e29cd965b8bce6ced9fce5e2f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659414, "uuid": "93662f36-e9c8-4886-bf92-2acc83dbb74d", "value": "T1B853C516BF251FBBEC5BCD3706B51B0524CCA50A21E93B393934D818F64B25B89E78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659414, "uuid": "ceb512ac-5124-4214-8652-7573d2f20d9c", "value": "1536:l0dVL1s+w4qqIQUvOH3I5EQexUAqAjRYa4Lut:lcVLNRqq7tHQcwLut", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659414, "uuid": "4de05c7f-9237-46dc-a9ca-c7de17df98ed", "value": 64912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659414, "uuid": "f02a6f03-f556-4aaa-a881-e3c1b6bfcfba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0279e015-ea7b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659461, "uuid": "13fd92a7-a49a-416e-8f5d-d4ab8c56aa12", "comment": "Malware payload (Mirai)", "value": "5afc14eb4a931b2f0f526ad667e37cd9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659461, "uuid": "42b6afc9-c35f-4876-ab2f-ad6c3e2ab44c", "comment": "Malware payload (Mirai)", "value": "2661e58c6e48862c3482691b8cb936e36a5e81717bba7730208e6366a97387c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659461, "uuid": "42657559-13fb-43f2-bdd2-1f91b9da21d6", "value": "T13F530845BC91DA17C6D862BBFA1E41CC332653F8E1EE72039D116F157B8A82B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659461, "uuid": "4caef395-d70d-44f6-91c2-52891971aa23", "value": "1536:CNjtu08viSadQrTa6jYH779POj4eur7R:CNjtuBTtYH77dOjtur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659461, "uuid": "166da00e-944a-4757-99f4-4e975bf67e36", "value": 66428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659461, "uuid": "80afe516-b47a-470f-a3a5-04644b1bd8d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1767659531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659531, "uuid": "d2a5b2a6-5646-4f48-aa1c-55b0458378d8", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659531, "uuid": "a3e12fc1-f77d-4222-8231-66029d6ee18f", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659531, "uuid": "0a3d7dc6-ddd4-4bb9-84bc-2e88e8c23782", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659531, "uuid": "5d72d562-7e4b-43f2-8f3f-c44640a263a9", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659531, "uuid": "a6c8ee4b-2cb4-4993-be58-d0e9536d44cc", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c8788a6-ea97-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659653, "uuid": "0693870b-42ae-4fbc-a87d-3b3458d26af5", "comment": "Malware payload (Mirai)", "value": "0b1ff640904a8280d9f06596a5307f75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659653, "uuid": "5c64c0ae-cd3a-44a9-90d2-09f02d53c1b8", "comment": "Malware payload (Mirai)", "value": "c2d5b7f36e74fc7dc72f6a73dd234caf49271be45d0806b22d1e23b2cf8967bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659653, "uuid": "ffbf358b-9da4-4e64-92b7-b5de410eca7e", "value": "T1E8530945BC81DA17C6D462BBFA1E41CC332553F8E1EE72079D116F257B8A82B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659653, "uuid": "2766bdac-75d3-4ada-ab6f-c45bbcc720b3", "value": "1536:TXVld8hgFPGgmaM23AKxnn6lZ/D3rFur7R:TXVldp3Vnn6lhD7Fur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659653, "uuid": "28781a0c-fe2e-4cfe-9076-6382a1541f87", "value": 66428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659653, "uuid": "dcae8971-1c37-42eb-878e-4dc7a593fb24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14314dcc-ea98-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659934, "uuid": "1f21ea03-7729-43dd-b0bf-9621d9cb3e78", "comment": "Malware payload (Mirai)", "value": "f33a7d57f03f2fe9e4b470a384986ce8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659934, "uuid": "5c31b009-ffdf-479a-9c93-476123019342", "comment": "Malware payload (Mirai)", "value": "5c91b81cea3d4b735af6d386f4ab7df60c9c3276a4b6c3eb00fabd3918d6e4c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659934, "uuid": "4dd2b298-1dd0-48bb-a289-ef8bdc270b75", "value": "T1CA233C99A401AE3CF94AE67F84134A08F631774521D30B3BA7BBFDC32D722945D56E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659934, "uuid": "65fb22e4-0caa-495e-853f-cf28ba02a390", "value": "768:2seiGH7iWe5MQbtpRRM9lblLaXfxXPAajT8zRGH:dTGfe5ftpRRoll4fxX4ajT8zAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659934, "uuid": "65f11be7-5291-48f2-affe-aa5fd899c0b3", "value": 49352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659934, "uuid": "01350fb0-3939-4762-9615-7f1ec5479e7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25ee6153-ea98-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767659964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659964, "uuid": "792ce211-e4a5-470f-9ec7-abd380af09c3", "comment": "Malware payload (Mirai)", "value": "5bd1928fd97a89c258b79c89b5886850", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659964, "uuid": "7cddab2f-2cee-41ce-88a6-41f08c7aaa9f", "comment": "Malware payload (Mirai)", "value": "b873558bf89dfc0a83a87b252a5c2cef23f3fef21ccf21dcfb7b3dfdbd3803a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659964, "uuid": "3162c37e-5782-4649-8eda-c5d3fc0546d8", "value": "T11973D8166E26CF6DF76C873647778E219788339227E0D642E16CED009E6034E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659964, "uuid": "68cd9f99-4c83-4ef0-ad4b-a576e466044a", "value": "1536:+94Xn4aNHqaVKLnqxvwT6a/Iv/+9v//RD3LnFDIXup7RxG:W44AHqaVFFu3LnFkXup6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767659964, "uuid": "6d9e75e6-8922-4ff4-b008-6c78fa71f30d", "value": 76228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659964, "uuid": "e9236808-eff6-4d5c-8b34-b8e24429a86b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7df2e089-ea74-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660030, "uuid": "b9397a58-57b1-41f8-9b5c-001bbd48d1db", "comment": "Malware payload (Mirai)", "value": "b760e4f5c1402ee2321edaa47855721b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660030, "uuid": "77e86fe2-0174-465b-b084-317ab7481a41", "comment": "Malware payload (Mirai)", "value": "9045588df3db5876f5163ad94fe794cd8abe198c5bd933b47bf2483fd1514ed0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660030, "uuid": "701d6008-b46f-4a79-b7e9-4394d53edafc", "value": "T174530845BC81DA17C6D462BBFA1E41CC332653F8E1EE72079D116F257B8A82B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660030, "uuid": "1553aa99-0aca-41a6-acd4-0249d71dccf8", "value": "1536:TXVld8hgFPGgmaM23AwjjZsL//D3rFur7R:TXVldp3FjZsL3D7Fur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660030, "uuid": "56baaaa7-69cd-4bca-8b3a-f61bb73de88c", "value": 66428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660030, "uuid": "39da861c-60ee-4072-8eea-e47134c01645", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63947826-ea98-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660067, "uuid": "f03b9d43-7dab-47e9-ab78-482058f85ac3", "comment": "Malware payload (Mirai)", "value": "aff8f27c1c35965f53f9e5d05e3661b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660067, "uuid": "530dc794-1799-43a0-bf1c-8d71d2d833f2", "comment": "Malware payload (Mirai)", "value": "0850c944fb1f8c4401a34067ba71add594fa5c22d5638c5fa6c6b746d1fb0619", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660067, "uuid": "e7b7920e-dd9f-4561-b3c9-53115a215480", "value": "T102335B8AEB83E4B1F95204702427AF13C332E525641FE6DBD3D46C71DC52A15AB173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660067, "uuid": "490ddbf5-1c36-4b43-bd3e-8006a037a240", "value": "768:0gOJaFpDS2T/qDy3ZLpIlgiZzO9nbJD/Q5I6iXWA8DlTsv6grS61F6jIK:0rFJwLp8Z9gB/Qi6mWjRsyg+ukj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660067, "uuid": "a6dfe08b-fd28-46fe-9e40-eb2355d08b0e", "value": 54412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660067, "uuid": "83426cdc-d003-4672-9b41-4c5200b6b72d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63a5bd8b-ea98-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660067, "uuid": "6ad38563-22ef-4097-a31b-663f3f4adb28", "comment": "Malware payload (Mirai)", "value": "9acec5f324acb3e1854092a5ab942a20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660067, "uuid": "aab5562e-4cf5-4589-b929-ea3c2d58c4a7", "comment": "Malware payload (Mirai)", "value": "fbbe346984a148152b418c22587cb0fb103da9ce7b46fee454b7226317610a61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660067, "uuid": "b53748aa-6908-4898-835d-eaf0b8cb8a40", "value": "T1BAE209A1590AB1ACF8E9013EB14B22B516E700683DFDF3DBF4275526EA5570C6CA6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660067, "uuid": "2ee5cdc4-19f8-4949-a95e-a8d799a9a1ab", "value": "384:ZHrHDuM6czKlJMnLcdLDh+EbW+vZHodYrK+DCnVormyNrYBOStlzZ1yBlyLaYL:hKMWlja+r9DCnymyZYBm2BL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660067, "uuid": "87323679-28f2-4994-a480-0d3a1998498a", "value": 34216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660067, "uuid": "aa263c73-104f-47f7-8d53-2399e9593da9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24e292ee-e8da-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660068, "uuid": "14470226-0a82-4213-b854-da0765f72af6", "comment": "Malware payload (Mirai)", "value": "5c1aa2f0026aeeeae2eb31dd14c22356", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660068, "uuid": "82939b80-2a11-44c7-8e8a-05ad2a9cd9cb", "comment": "Malware payload (Mirai)", "value": "77eff96aca7e24a0276efb0c3ebec9efb39a700049d1f331d1b454a7f9fdcc87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660068, "uuid": "582b1f85-5949-4cf0-a50b-fc3ac424624d", "value": "T1CA83C80E6E219FECF678C73547B74B21D39833D623E29685E2ACD1145E7024E245FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660068, "uuid": "6e3fb439-7455-4e41-84c3-3c7c767f89f1", "value": "1536:NyqCGNy8BXnIR35O+TPbPI3z7g59fh1T6vPaejLEifqs:sqC/5O+TPbPI3z7gzh1T6vdtSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660068, "uuid": "7d068325-c3b0-4b8b-b89e-34b900a33d1b", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660068, "uuid": "03fc0176-18d6-40ee-922c-f9b25aad69cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b49629c-e90b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660072, "uuid": "d26163a1-02d6-4f2c-9d72-a6587938aaa0", "comment": "Malware payload (Mirai)", "value": "24a490dbeb9ba40200f42b3f15665370", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660072, "uuid": "4f111ae5-3e9e-4ced-a75e-a52d9719dee3", "comment": "Malware payload (Mirai)", "value": "1bc4dc66711c1edf331432d54b3a39f182656dd719e5731d786b902fcc916eab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660072, "uuid": "9aac5bbe-6e03-45ef-a8f6-97886b63cc8f", "value": "T1DE335A4AEB83D4B1FA5205702427AF12C332E625641FEADBD3D47C71DC62A15AB173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660072, "uuid": "3400dc02-2353-4c00-b118-da60f3ce030f", "value": "768:0gOJaFpDS2T/qDy3ZLpIchpt9nbQD32WI6laVO8DWZ1HTVMUuxm1u0F6jIK:0rFJwLpFhVI32r6QVJ61HqUukHkj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660072, "uuid": "f48ea250-1037-4d15-8992-c74f3170327c", "value": 54412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660072, "uuid": "c574a40e-dc58-4588-b43f-ed4807343247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cfdf180-ea98-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660136, "uuid": "3435edd6-4a50-4468-8289-5b0ed814e045", "comment": "Malware payload (Mirai)", "value": "da558524db1220e5e2296f6a3f8d6500", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660136, "uuid": "60c8b150-8d55-41b5-b634-8d8df876651f", "comment": "Malware payload (Mirai)", "value": "9875984914a8adbe23f752b88c17a42d4837300bf5a018c967b916dbab9a788f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660136, "uuid": "42ef6338-b698-487a-ab22-3feebeb7696c", "value": "T126536E4232184A53D1E60AB02D3F1BF193FB99A021F4B7C9654FAB598276E331486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660136, "uuid": "239a5523-df64-4944-b3d7-4cb21bcee925", "value": "1536:bPkQGUS+cxUfe/7sB5YmYyoBD0Bz+oeF/vur7R6:EfIBmSoFoeFHuro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660136, "uuid": "92261731-1083-4b10-9bc6-6a35e9f5ff74", "value": 66528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660136, "uuid": "32e01ad7-404b-4415-8b55-bfd9bb9a042b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9288883b-ea98-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660146, "uuid": "21356686-87f3-420a-b1c7-473f9737b67f", "comment": "Malware payload (Mirai)", "value": "695745f96696eb7e1ad3063f162ee3ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660146, "uuid": "bcc9be5d-4e39-44c3-ab72-9dec747ddd86", "comment": "Malware payload (Mirai)", "value": "90259f443b965276f304f1b28d98243c33ea5b5d0d73b9d1901ee625a05ddeb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660146, "uuid": "f5894ec6-c85d-4b39-b0e3-d5cc4ac70f3f", "value": "T15F436E4372180E57C5E60670253F1BE093FBA66020E4B3C5655FEB6A8676E37208AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660146, "uuid": "7ab3a6df-0bce-4bb7-b42a-8217d4ef7ecd", "value": "1536:w56Te0anWWrLu3Lah9QYbmdS6Sn3+Hcup7Rp:lfAcLaXbmTSn3+8upv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660146, "uuid": "dff993ad-11c6-4591-8761-f45da7905db8", "value": 58336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660146, "uuid": "691a5f4f-23ab-4506-b16e-4e06ca6cfa6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6f917d6-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660244, "uuid": "5e7c90ce-5515-4261-83c1-9e6c285a77ba", "comment": "Malware payload (Mirai)", "value": "3d0dd156e4f571a9438eeb20b2d8a010", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660244, "uuid": "1d8f2e92-4989-4514-8624-98f4b4b87135", "comment": "Malware payload (Mirai)", "value": "4be77b6577852cc28db82d26c1208c9e8399821bb5679ab8bb7a9d0292d6c6bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660244, "uuid": "dea7de68-031c-4aef-91ef-1f76d5cce421", "value": "T141537D36C56AEEE5D14C45F4A8B1CAB91B43F200D2572EBA6A88C4654047BBCF70D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660244, "uuid": "85839f9f-19d9-4bd0-bec9-162df98875c8", "value": "1536:jazwtKWyxqcZ23Yd6mx2aiJWUEX5Nig7YCYacur7R:jwGyB03c6mx21EpNV7Yrur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660244, "uuid": "aae7a23d-0a4c-4c09-9449-a8d9cda8d4b6", "value": 62328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660244, "uuid": "e379222a-a832-4b7b-85c5-47ae9812ae63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bd6cdce-ea88-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660266, "uuid": "89926c60-8533-4cdd-9087-f48d55246e74", "comment": "Malware payload (Mirai)", "value": "77377092dee8518e43015473b64208e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660266, "uuid": "c2e28009-0b55-4183-99bd-874f76e487ca", "comment": "Malware payload (Mirai)", "value": "c2960b35ea4b827eaadf69504d898ce7573c6fbe66e944906dde233d0763745c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660266, "uuid": "ad070a5c-2b07-447d-a3bf-a3f06e28852d", "value": "T125435C8AA005DD3DFD5AE6BBC0160E04F5283365A6530F37B7AAFCD31D72069991AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660266, "uuid": "d4597011-f046-4fc8-9182-449045414e8f", "value": "1536:TphxNxfhebXw+fOYGovopqG0MoV2C3yXQzk68DAmP8:TphxNxfhUfaovopqG0n2lQwA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660266, "uuid": "280ffa58-43f0-4030-8e23-9b3f5195036c", "value": 58764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660266, "uuid": "59dbb35b-00ed-4dbf-9e68-a15bba7f8a96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70ecc482-ea83-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660402, "uuid": "828c5183-f153-483e-81c8-914edde50cfa", "comment": "Malware payload (Mirai)", "value": "9f6facc8cb993dd2b91d1b0fa5e59871", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660402, "uuid": "c53f5f75-037c-44e8-b51f-055beed328dc", "comment": "Malware payload (Mirai)", "value": "baf62e1c205223bbd1822b9e1a3188f679838fd217b11b16022a204fe30c8a0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660402, "uuid": "4a5eaa16-ace3-4e0c-abb9-c23b48f37883", "value": "T181930849FC819B15D5E922BEFE1E018D33535BA8E3EE72029D105F25378A92B0F7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660402, "uuid": "964a6ea8-2e2b-4ca8-a539-d24281493d03", "value": "1536:IRnYCILxAw+j4WyzmqyGgs6DHwen6MmcwBAGSfmPSs3lNlWCiFGPIjXour7R:00xAf07yGgFDHwen6MmcoAGSfmPS/RGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660402, "uuid": "8af9b420-db4b-4199-be6a-658ad033291d", "value": 91488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660402, "uuid": "13c14eb7-04a9-4fa3-a41a-3a7ea551e599", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ac314ed-ea99-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767660455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660455, "uuid": "1f755fef-4264-4c11-9672-bce236659fd3", "comment": "Malware payload", "value": "7144bfd369c6070f8723bb8523cd9246", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660455, "uuid": "1d096589-6307-4458-871f-b6e694217137", "comment": "Malware payload", "value": "fd1ce709645e820d6347b03a688cc2a5c1b4fd79c3138ddcc66d3da50e654030", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660455, "uuid": "27d9f97c-6fab-4224-9b68-1bedb6ffa767", "value": "T186835901F250C035F0F700FACBB54B7A5EA9AF11536890DB57D855EAAB31AC1BA323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660455, "uuid": "8bb56536-e00a-4fb4-a4d1-0bd2fd6c45b8", "value": "3326b0ed8ca5d20f5013f8b3c04e7744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660455, "uuid": "6a0bebca-79db-45ae-a43d-eb14ae2c7c12", "value": "1536:Z148CrfdXNM840VhyGzirik7okuAhoB2y:Z1zmM92yrCksB2y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660455, "uuid": "e1aba2aa-ed90-42d5-a3e4-889b78da60e2", "value": 85504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660455, "uuid": "2536b4f7-433b-4521-b5c6-6626b8384143", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55774e5f-ea99-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660473, "uuid": "b792cc4b-479b-4a6b-935e-90136696f9fa", "comment": "Malware payload (Mirai)", "value": "e5e44d8f008a922aac4338e3a3435a49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660473, "uuid": "6f6a9c6f-1514-4702-9fd8-e27e7f276550", "comment": "Malware payload (Mirai)", "value": "d14675730fdcd76877918cae824a4a3c145c72d93932a400bf22d514e3ebb48d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660473, "uuid": "b91c87a3-b303-416c-959d-2b63147dfe10", "value": "T14313E88ABC95CA56C6C55177BF0E42CC372603A8E1EE73439D18AF66765F82B0E3B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660473, "uuid": "f0299ce0-717e-4d6f-99b2-ae6cebdb1464", "value": "768:e5xHpBHnTqW2oFynNIEmNThd8BipeAJtxnvJur7R:SHXPFAuBh18Khur7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660473, "uuid": "814ba5f9-1460-4692-bf7e-6f67417977f8", "value": 42836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660473, "uuid": "a2680c08-0406-4ef6-9e1c-658d5fb042a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a98c2ae-ea99-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767660481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660481, "uuid": "c82d3b58-0a36-4a4c-aeea-aff12ab8b57c", "comment": "Malware payload", "value": "6cf3fca1f09fa6978c04f8ff807b55a7", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660481, "uuid": "2da765a7-f076-48fe-8463-e6ce77ec2a48", "comment": "Malware payload", "value": "482ec01e382d0b866977d43b4e9536af3bc4d195e4701e6b975ca22cc3a1adfd", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660481, "uuid": "7a51ec88-7bc1-4a6b-925c-373dd649df08", "value": "T1D3C402766443BEC66E7F0D84E9442D890C656DAB43E0CC1CF7C82E9EB6E2610DE2D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660481, "uuid": "bda8e997-b50d-4de0-a214-16c9ad0a1b5e", "value": "12288:GxOOu4C1jCYO0+zssOy7JgbeY97gV2vGO5j9uQ5m:u+1jc0+MT97gVT6m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660481, "uuid": "34796171-ca6f-40ce-95b7-97638edf7ba0", "value": 584733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660481, "uuid": "acfe5d6c-6988-42e8-81a3-98fc745b9a3f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1767660608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660608, "uuid": "d2c7275a-66cf-4403-bea8-a05ed4f60ec3", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660608, "uuid": "05d89ed9-520b-461d-8058-e383721d0c41", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660608, "uuid": "1d3c35cf-07a7-4c06-8b16-c0a1f936933a", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660608, "uuid": "4be74000-104d-4a19-baca-105ab7662f71", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660608, "uuid": "44e7fab2-221c-4d10-92af-2b99395ba799", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa753fb0-ea99-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660615, "uuid": "9c2c70aa-41e0-4d45-a030-806d3fd8cbae", "comment": "Malware payload (Mirai)", "value": "db5e0dabf924da3ebca5a42da7e46fbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660615, "uuid": "8e729fa4-d14f-49ef-b5da-ca3459ba2217", "comment": "Malware payload (Mirai)", "value": "0c4b53a4369188aee970da536c2b7ac65edf9019f40b14cfeb5be411c6f3b7fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660615, "uuid": "8a3e1eaf-f332-486a-a8f1-b72944764f81", "value": "T10C53C60A6F258FACF76C873647B38E219798339627E1D645E15CEA011E7030E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660615, "uuid": "1d4dd7da-ac12-4221-b712-3cc10cbff9bc", "value": "1536:SK5pHZW+XvJIjKh7/sBXC1FqRF7z14hCarAvrWxvrrObhXdey3fFuJ9:jHZHXv+jYwXCA7z14hChNlPFuJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660615, "uuid": "15ba1fb2-409c-4579-a986-75ad02feb924", "value": 63536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660615, "uuid": "cc17ae56-4898-4b6d-a0c0-69452d4332a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d324677d-ea99-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660684, "uuid": "2842c82c-ed6e-4086-9106-aab75ace6e52", "comment": "Malware payload (Mirai)", "value": "2ec23bc3180a9950de07d313e9d18e41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660684, "uuid": "2566e053-f2f9-4913-a4b5-7febc3bcad61", "comment": "Malware payload (Mirai)", "value": "1f05e76c1a36000a676ec1bc7850fda0a0d91c5789ecc8d97a2e0e90cc4d552b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660684, "uuid": "049cdcbc-3fce-46f8-9cba-bf2649955c66", "value": "T1D783074AFD819F15D5D922BEFA1E018D335367A8E3EF72028D105F24778A92B0E77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660684, "uuid": "fd709c19-5691-44da-a76f-f03af86b82c3", "value": "1536:tRnR1eLRiI/SOqn5savHwe65CNbsfi8/OnmSkb4FNlHSiBWazP8mup7R:noR/xy5hvHwe65CNbsfi8/OnmSnFWaQF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660684, "uuid": "01c4b1a6-5dc8-4a33-9b05-cd44c21818fc", "value": 83296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660684, "uuid": "123b57a2-538a-457b-9947-d63a746576b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "903c21e9-e9a0-11f0-8990-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1767660700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660700, "uuid": "aa244f7a-78ac-4ee7-a1f7-571736e5695e", "comment": "Malware payload (Stealc)", "value": "2df6951b9ef238bfb1c879e18221db30", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "XSS", "colour": "#e08b6b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660700, "uuid": "dd400120-b471-494f-8ac7-2ac743d4aa7c", "comment": "Malware payload (Stealc)", "value": "7b2620cf008268fa8eff18c136ca020fa948634e646f7301ab48a5dd936033fd", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "XSS", "colour": "#e08b6b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660700, "uuid": "7f4e70e1-7bc0-46fe-b9ea-cd47b6844542", "value": "T1D3759E55B2B400FCD167C178C9475A0BEBB278061770EADF57908A6A6F23FE11A7E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660700, "uuid": "652be73b-3578-48a1-a5af-bcc57704456e", "value": "14c00cd98c6c67089f15befbbc9b5dc3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660700, "uuid": "2a1c9e1a-a5af-4b13-95aa-9f75fb5f38bd", "value": "24576:402+h4Q8qAjv6qfjq1nJAfPVHDClF7rDheENnlBtSqlOqrXtd0RlgbCpS:+Q8FDjWJAfPVHCpheENnd75r03gb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660700, "uuid": "cf4fb644-f933-405e-bef3-23ab48c5083a", "value": 1665536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660700, "uuid": "57127cdd-bec9-46c0-9fb9-72d75c5cb1cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fead526b-ea72-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767660714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660714, "uuid": "ae71f99b-3170-41d8-8c5f-f0b905106b79", "comment": "Malware payload (Mirai)", "value": "141a3b5bee1f0c13ed6c6e8f9d0de602", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660714, "uuid": "fb8bbf98-f844-476f-a4a0-659ad5b583fa", "comment": "Malware payload (Mirai)", "value": "d964088a6141d580a0d78316d4767dc89a846e3aa05db3b4e2505594a47444d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660714, "uuid": "efd8e363-5df2-43ca-ac7a-d1ed09430f1d", "value": "T14983D709BB254FB7DC5FCD374AB95B0429CC960A31A83B797930D818F25B24F59E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660714, "uuid": "2e3ecf26-c0b6-4abb-8262-9d8074b920e3", "value": "1536:ysDG+OPEBy1uY/O3jh0H5y9WyLgjVTOAFpoMOnbO5yMHeur7RR:ysq+Osy19/WhWy994zPeurj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767660714, "uuid": "3e95570c-89d8-48ab-8acf-2558cad1c6a3", "value": 87020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660714, "uuid": "6e0980e0-f4f1-41cb-9b2a-5c998ba89473", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b37e284a-ea72-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661015, "uuid": "5475ace9-6da4-48ae-b7a7-a9990c9427b7", "comment": "Malware payload (Mirai)", "value": "0939bfb27162eb7fbd6d74a53d51e0df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661015, "uuid": "558d0105-84af-4e50-a8e8-9f429d954083", "comment": "Malware payload (Mirai)", "value": "858ab0640d7efd2cea3d98ee58fbf903e8d3cbe9c1476d17d9fdc2eb2e5a6072", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661015, "uuid": "27b8ad34-1d7a-4bd9-b5b2-978232506c68", "value": "T1C2438C7AD93AEEE4C18845B4A8718AB51F53B204D6A71EBB6A85C4714003EBCF60D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661015, "uuid": "cc149891-5108-4e00-8052-92f14475c953", "value": "1536:vaDwtJHNktSAlndZhhk2ZUGFTtKC57up7R:v42N5cdZhhkbGFTtKCup", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661015, "uuid": "11329325-c555-4202-b5a6-ba95670edd7b", "value": 58232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661015, "uuid": "fdf18422-e85c-4d3d-b08d-9225dbe030ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b7ff67-ea72-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661024, "uuid": "a5f11337-5174-4d21-b92d-74d6074293e1", "comment": "Malware payload (Mirai)", "value": "529b7510097beeefa031dbf28aba1adb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661024, "uuid": "16c767a7-909b-46fb-b193-a6e31448f4c9", "comment": "Malware payload (Mirai)", "value": "bbedde1ec9c75c1dffe60146103d0b25c9bafa3fc38d99f88b571d8a8a440831", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661024, "uuid": "aee0e0e7-47a2-4d64-bb8b-3d31eda57bc6", "value": "T151534CD69000DE3CFD4BE6BEC4160E05F52473959A920F3BA3A7FDD32D721A88919E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661024, "uuid": "c302304a-0d9c-4d95-894c-3167f875ae93", "value": "1536:R3oDGznBvIUqkBzPshRXr9N9vUVHBYGlg8A8oPB:R3oDY/hBzPURJrveYkJy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661024, "uuid": "cc7bb5cb-d536-4fb7-9b53-a2596c3dd1eb", "value": 64740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661024, "uuid": "347a4748-6f5c-476c-8d9c-5fb6e4fab5f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a72ed422-ea9a-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767661039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661039, "uuid": "a1e98daa-6e88-45d9-97a5-53a3f11555a5", "comment": "Malware payload", "value": "1ab34b2c0d247811a51b86142717dfac", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661039, "uuid": "07a71654-537a-4a17-a117-afa70bd3d6bd", "comment": "Malware payload", "value": "6f4ca9bf8b83203aaacc8220af230d1658c382d8510be2a1ee5fd4165fefc3f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661039, "uuid": "90e51467-8498-462e-86d4-89ca014aa40e", "value": "T1A393073279895819210B028FE223377C70FFD992E60195A5F7FA323497A5EE036B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661039, "uuid": "e323372a-fb43-487a-9222-3a55d5283d2d", "value": "1536:T8ap+tC2Y6sJNeIfIxVqpYJKNoptpxh3ttrTPcNbL3FLkLxIB6FG43tGyUNfQvtN:/6C2Y6sXeaITtpbttrIN/3FYLxIB6E47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661039, "uuid": "743a1948-448f-4ad7-aa82-ab0a2e410781", "value": 94353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661039, "uuid": "02924c1c-c9be-4bde-b075-06736c16bd20", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68623dd2-ea72-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661102, "uuid": "e35c2d7c-c57f-441e-acd1-40c93fd3621a", "comment": "Malware payload (Mirai)", "value": "5836098a49fa7c271b9361982a6c7867", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661102, "uuid": "43f0e0fe-741f-4ee8-9486-75b932f20375", "comment": "Malware payload (Mirai)", "value": "399f968874f4cfa5941ff31a8721baae4537eafd27698f53a53d4561c1e85d24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661102, "uuid": "a643dfb1-c613-40d8-9580-dfe86b5e87d7", "value": "T19353F945BC819627C6D462BBFA5E41CC332623A8E2EF7207DD11AF15778A82F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661102, "uuid": "2ebaa283-6993-47f9-9cdf-35e61987905e", "value": "768:i9lcWd4ojOMj6gDrS9dG8XSA05rV4emQx4Zn7/3SNmTSzfh0Oup7RT:EuWqojodGQdYrVjx0n7/3xc7up7RT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661102, "uuid": "a5534c08-c803-4158-a21f-ee5d352ddf54", "value": 62332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661102, "uuid": "12d10565-6e8f-47c6-9da2-a56ca5ad5824", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf3878c6-ea9a-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661107, "uuid": "2cd711ac-1dea-4f91-9eb5-1d3d30651813", "comment": "Malware payload (Mirai)", "value": "e855cee51b5948eb729ef69673f40d8b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661107, "uuid": "7d6cbb5c-80ec-4129-a023-fb71351fe038", "comment": "Malware payload (Mirai)", "value": "17b969159b26210ae95bebcd4a632651e7596fe314b0deaea6306e035c0545c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661107, "uuid": "16596726-d595-4c6e-a35c-cb0b13cabe51", "value": "T1ED635B21B97D2D1BC4C4A47A11E74334F1F21B4B36A8CA6E7D720E4EFF606542117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661107, "uuid": "dec08c27-0018-4c9b-9bf6-8b45bff68de3", "value": "1536:BMWSgJZB8g9+5wbeZewSla92Rhi55g20M+jhTSmEebch/:WHID9dqTCMi2GSmEebG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661107, "uuid": "51d7bd4b-7c0a-4cc3-ae07-8552f97e7a4c", "value": 68968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661107, "uuid": "59bf181e-d690-43cb-8e08-2ad07e5e8d19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a87b35f-ea9b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661233, "uuid": "8d06bd45-4b05-487c-8278-8c1a2f93be1e", "comment": "Malware payload (Mirai)", "value": "6c893a5658a496034611afef745180ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661233, "uuid": "12e6a7af-bbc8-44c1-8ded-0c507f08800f", "comment": "Malware payload (Mirai)", "value": "f8b55eb873faf9daf14bbddc6d890d9ad8cdcd1b4719f57d4dd12c622048e96b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661233, "uuid": "7fab1cbc-fb7d-4031-9f3e-ca285784a50b", "value": "T165231944B8819A23C5D4237EFA6E019D373563B8E1DF7213DD216F15778A82B0DBB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661233, "uuid": "00b1f0ff-c88b-4a3f-b92b-dfaf8a666593", "value": "768:4JkpG23cuevkkthJ6tppekNj49Ue5OgGukNmTPjp8Ou7:Tpn30J63pNW9Um9Gu/Hu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661233, "uuid": "9c46c3df-9fb4-4cec-875e-4c44d1cb3ebf", "value": 50044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661233, "uuid": "773d2835-1a45-4489-9923-e2143be997f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a26a64c2-ea9b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661461, "uuid": "b7680591-ac32-41d7-a924-593d4522a287", "comment": "Malware payload (Mirai)", "value": "ba0ec1815a9ab01f37d74bd96176c15a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661461, "uuid": "a90a2ee5-0c98-49e2-a044-cdcbbbff9649", "comment": "Malware payload (Mirai)", "value": "8a5c7212f989321383ecca141af7005ce989202cfc83e33c9e26462a55527847", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661461, "uuid": "cd1f17eb-04ac-47f2-a5a6-3d9e05fb6feb", "value": "T127137C76C02E6DD8D58856B8E4708E789F53F500C2632EBB8A8989758043BBCF51D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661461, "uuid": "b0bfdd81-41e6-4005-9504-c5b20956de1d", "value": "768:La0wtrXvCRbgefUE8c5pUOP5xgprdnUEjUGCho1zVDC4Uu:La0wtrx+t8fOYFdU0UGV/DC4Uu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661461, "uuid": "c42a9dc7-2b74-4668-925a-c8b72d0bf9d3", "value": 44088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661461, "uuid": "421ff4db-8f62-48ee-8bb5-189d30cbf3e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfeb7c2d-ea9b-11f0-8990-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1767661564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661564, "uuid": "97d277cc-6bd2-4d0b-964c-b06a47f68b31", "comment": "Malware payload (Stealc)", "value": "75914207c89e01520ec7905774192f04", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661564, "uuid": "5fffabed-376f-4cff-9ab2-f522d7bf19cc", "comment": "Malware payload (Stealc)", "value": "a548b65783231dc2d4a936ac0cdde7ae373ac84e1142a7678bd045b9d129cc06", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661564, "uuid": "e5828d75-2214-422a-8870-6afbc2cb6abd", "value": "T113B56B47BC9015B9C4AED2318A6A92527A70BC990F3163DB3A60B3FC2F727D45E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661564, "uuid": "14d0425e-dc11-4620-82d2-2d5aecda34a6", "value": "f0ea7b7844bbc5bfa9bb32efdcea957c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661564, "uuid": "f5cc4279-4f60-4dcf-9ccd-c7f21110a75c", "value": "49152:ZaBNlIwxb3uCrb/TMvO90d7HjmAFd4A64nsfJt0udLClUBr4HyfZhsRoYg15Q6Eb:ut3unArwYh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661564, "uuid": "e539849e-a67b-406f-b608-0693ef745512", "value": 2293248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661564, "uuid": "20fe265b-eb39-4f3f-9fe5-e567142b157e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4162d797-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661587, "uuid": "471be10e-0988-4b15-a812-3f41e7e3a444", "comment": "Malware payload (Mirai)", "value": "05a0cf441571c27a8f271fa14af811de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661587, "uuid": "75e1ceec-f059-49bd-a0eb-4b75e9d4b746", "comment": "Malware payload (Mirai)", "value": "38ed1311ff2292873a8fa42ad71ee27f6ab317ae9fd6bacdcc30929897e31fd4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661587, "uuid": "ba631504-a45b-4af6-bf1e-5e9ff125cfeb", "value": "T130534CD69000DE3CFD4BE6BEC4160E05F52473959A920F3BA7A7FDD32D721688919E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661587, "uuid": "07df6294-71e0-4183-b2b1-0ffc24b89bb7", "value": "1536:R3oDGznBvIUqkN/PlhRXr9N9vUVHBYGlg8A8oPB:R3oDY/hN/PjRJrveYkJy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661587, "uuid": "77a7339c-eec5-425f-9e0f-fa1858e38efa", "value": 64740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661587, "uuid": "5e9cbd96-7ee6-4e7a-91fc-2945afdfd4e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3345b90d-ea72-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661880, "uuid": "260802dd-5570-4a26-b99d-185083958259", "comment": "Malware payload (Mirai)", "value": "0aef86c960112235cae11038b88102e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661880, "uuid": "8bc6d0b8-be7b-441c-a690-790033642d1e", "comment": "Malware payload (Mirai)", "value": "6a432312062a69b9cbb2804d8bf6a810a24f753f5c072fabafcdd28959fa5a8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661880, "uuid": "64c39275-b458-40a5-ba91-757432a73b10", "value": "T12683B70A7E22DF6DFB68C63587B78B30D798239226E0C641D16CF9045D6474EA41FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661880, "uuid": "1edaa46b-fd68-4cc9-ae80-aa5f1ca72edd", "value": "1536:qpzqc2hc1Cp9j7hNxq+BlpYi5DozHNfSTc/Tl9/TTmGUKFFxkur7R0wr:8qhhh3q+Cix8/UKF7kurxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661880, "uuid": "c91c4924-0536-410f-8699-a7a5943b2db2", "value": 85132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661880, "uuid": "012998ac-45b1-4e62-aa04-caa0300e3e2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7e29ffa-ea9c-11f0-8990-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1767661926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661926, "uuid": "f62889b1-6b2f-4a35-907c-09bc41534c53", "comment": "Malware payload (Stealc)", "value": "cdedd1c07e270c58c6578ecec7acd36e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661926, "uuid": "e81ccac2-b159-4e30-a824-1b7c55e2ae6c", "comment": "Malware payload (Stealc)", "value": "dc38f3f3c8d495da8c3b0aca8997498e9e4d19738e1e2a425af635d37d0e06b8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661926, "uuid": "5f623cd1-2801-409c-ad51-1863a486bcb2", "value": "T1C7058D5EE7A502F9D0BBC178CE424552EBB2B8155770978F03E11AA61F372A05F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661926, "uuid": "34ed5099-053d-4c5b-a10d-4b63688bfb4f", "value": "baedab261d9b0ee2285b2ff329a5eaec", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661926, "uuid": "d122d4d9-08c2-4798-bb7f-11fd4fd1cab7", "value": "12288:AU8VHX4ZPBuvzkOkW7UE+YTRqwJ4O2zv3YZtF15kjHKA:KVH6BuvbkW7xXVVmO2L3UA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661926, "uuid": "4bfaf745-7b00-48d5-ab53-9e61a6c46cbb", "value": 837120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661926, "uuid": "5bcc5bc8-ae31-49ce-a42d-5c2c3fc07a79", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee90e2e3-ea71-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767661948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661948, "uuid": "d7f576f7-8024-4835-8c32-584ebcd67918", "comment": "Malware payload (Mirai)", "value": "ba94efd4330bb730f0ce6be8d56d7003", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661948, "uuid": "34084d63-9d4f-47ba-a482-30a9d5858308", "comment": "Malware payload (Mirai)", "value": "c4a949c066a48b62cce2ac39b80dfa53f18bec1f21728ed502a50098cf8bf086", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661948, "uuid": "45778b46-1013-46e7-a3dd-b4607d53f898", "value": "T16063E946B981CA26C6D512BEFA2D118D332717B8E3DF73139D105F257B8A92B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661948, "uuid": "d5100c45-1752-4423-b112-8e52ad0e6fb6", "value": "1536:2Rnz4xz2cRMmUA1sMpQHweo0sWQPrN7PxIKiZ8+C/SWup7R:Z12wX1DGHweo0sWQP68+C/SWup", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767661948, "uuid": "42d277d7-f337-45aa-a73d-91092416b57e", "value": 70840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661948, "uuid": "88a63381-3ba1-44fb-a0fe-1f612e3ab7bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a01e606-ea9d-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767662279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662279, "uuid": "1931a548-0a46-40ca-b0fa-9a41edefd50e", "comment": "Malware payload (Mirai)", "value": "31b4343e7b9e85fe038a77e877371d60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662279, "uuid": "fa227d01-2d82-4a60-b8f1-1d9df329ce10", "comment": "Malware payload (Mirai)", "value": "6ad50f7b647edbe81f003a8b5b1a29c70991dc82e456d70021bfbc6c32e89dad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662279, "uuid": "403694a9-51bf-48cf-bb1b-6ff80eaaa454", "value": "T18563E74AFD81DB15D5D525BAFF0E528C33535BA8E3EA72029E146F25678A82B0F3B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662279, "uuid": "0f139f51-e896-4f61-bb2e-f53ab72bd99d", "value": "1536:EJn56qdg/sFzLOHwe9dT151dbAzHoP+qdllroiTTNty5GRur7R6:kvdg/euHwePT1ZbAzHoPBTty4RurQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767662279, "uuid": "96fbeb16-9a73-4313-bc32-701c84b51eca", "value": 68000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662279, "uuid": "675a17aa-9d0a-484a-b7e5-d8a963b0acc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e616fab2-ea9d-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767662433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662433, "uuid": "119b0637-d26a-46ff-9a32-fef0763997bf", "comment": "Malware payload (Mirai)", "value": "7dfb56482ab28e86ef638d5bc303ecb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662433, "uuid": "4ed1cbe7-e85c-474c-a7e3-02ac781b71e9", "comment": "Malware payload (Mirai)", "value": "6afc4b419da0a95536ba1f34fe3fd37710434dfaadf337dd15e7fb2f4ff0834a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662433, "uuid": "ea379895-18e4-454e-8aaa-9d296010080a", "value": "T1A8930849FC819B15D5E922BEFE1E018D33535BA8E3EE72029D105F25378A92B0F7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662433, "uuid": "93f4bbdb-f986-43ef-9022-f605beee455f", "value": "1536:IRnYCILxAw+j4WyzmqyGgs6DHwexuMc8wBAGSfmPSs3lNlWCiFGPIjXour7R:00xAf07yGgFDHwexuMc8oAGSfmPS/RGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767662433, "uuid": "b629f93b-3fcc-4719-b481-4245728e6833", "value": 91488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662433, "uuid": "ee94f87b-c4f7-4897-a3ac-6d6f5683e092", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eab4983f-ea78-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767662672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662672, "uuid": "c09dde83-779f-41cf-bb5c-235d7ae1cf5f", "comment": "Malware payload (Mirai)", "value": "d476848100ce813f4cd2fd65aa2fe9af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662672, "uuid": "1b095b61-248d-4834-8c6e-770ba3cd35ce", "comment": "Malware payload (Mirai)", "value": "5335a4662a1f6e00883854cee749bdeef0ce4da1f7c653bd88a2b7f378613665", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662672, "uuid": "366f4af7-fc84-46f4-b3a7-fe9723312aea", "value": "T1B673C415BF214FB7EC5FCD3746B94B0529CC950A22A93B367934D818F24B29F4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662672, "uuid": "3724069b-a9b3-4696-8ad5-d906aa744020", "value": "1536:s51N+0UMDGG9QORDh65Rd2wZwhI04MqISmO2X9Rup7RH:sTNnUiGGSwDIRrQbRupd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767662672, "uuid": "735f6e15-f40d-446a-83e1-7827fb96d2f3", "value": 78116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662672, "uuid": "c5e2c1ea-860e-446e-8b97-35eaf4c86bdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a034dcfb-ea9e-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767662746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662746, "uuid": "efa1c024-4fc1-4d44-9010-cb0a92e16b9d", "comment": "Malware payload (Mirai)", "value": "10f33db1d31241235dacde16443c6f92", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662746, "uuid": "1459f41f-63dc-472e-bc5a-bc859ad7df4e", "comment": "Malware payload (Mirai)", "value": "31138264fac5dc4b0e8d0196b36d787511cfdc267494c99b18afebbff088987e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662746, "uuid": "e8bbcca5-f900-48f0-bcae-1f6b2cc5c089", "value": "T1BF533AC9BA03D8F4EC1905752472F7325632F5761034FA9BEB94F936A853712F90A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662746, "uuid": "9a57df9a-19a7-4dd0-a88a-06d68b8c4eaf", "value": "1536:bHMP5pNUfhS0q2DBG2X/LdktlaAvuWKL7hZFInKL0rStYR:bHMxvUfhS92DX/LolaAvufL1sKoet", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767662746, "uuid": "4386a56f-55df-4447-a834-d09c9abb514d", "value": 62096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662746, "uuid": "8900e11b-b310-49de-98dc-0aec2cf11b57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f52ecb25-ea71-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767662784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662784, "uuid": "7f6debf9-279d-4fe1-b404-75c97170efc1", "comment": "Malware payload (Mirai)", "value": "1b6091c201c410d24defac8c6fd79d51", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662784, "uuid": "d4d17bae-7548-476a-bbe5-42ca172a1f07", "comment": "Malware payload (Mirai)", "value": "560a5a9ecf8c54f7ea18f536dc6e55b81dc09d728d61223e234e08368ff56656", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662784, "uuid": "e1dfc0e1-e1ff-4f29-80c4-25573a735c28", "value": "T196530945BC91DA17C6D862BBFA1E41CC332653F8E1EE72039D116F157B8A82B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662784, "uuid": "47099868-5ea4-4108-9408-345eb64c31e4", "value": "1536:CNjtu08viSadQrTawxMpph3POj4eur7R:CNjtuBTtMpphfOjtur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767662784, "uuid": "c4a805e3-6448-42a0-9aa4-1c7bd9c4f693", "value": 66428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662784, "uuid": "0cbc7684-4f7c-400f-bb47-4c75f42daeaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "baa202d2-ea8a-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767662908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662908, "uuid": "61ee6826-27aa-4ae3-b907-d0fa96418283", "comment": "Malware payload (Mirai)", "value": "6b40b56c99fb868e87b78590f8f4419f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662908, "uuid": "bb495f2c-d384-45b3-ac12-b4224511f9e3", "comment": "Malware payload (Mirai)", "value": "84108ae96cbc1725eed59ca3c40cdbf640e66532e660ed2101e018f68c80f6c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662908, "uuid": "2da9a8a0-abe3-4a52-a355-b7e0fcf315a2", "value": "T19363F749FC815F11D5E822BEFA1E118D33676B68E3EF7212DD101B15778A92B0E77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662908, "uuid": "6e79cb7b-7f2b-4d57-b1c7-55db9f02d179", "value": "1536:25n4PnnhxYdH7oFIs6D+EADNs/tynXnbWNlw7iQhdxPDZ4u:Thxs2InD+EADNotynXDVh7l4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767662908, "uuid": "1565c15f-f42a-4beb-9dd8-4aed35469e16", "value": 73060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767662908, "uuid": "6df96232-354e-4281-bddb-ec7f53cb75e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5e2f181-f512-11ef-9894-82aee05be84a", "comment": "Malware payload", "timestamp": 1767663075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663075, "uuid": "c8c2cf1b-b4a3-4346-a860-7920b17b4ed2", "comment": "Malware payload", "value": "f1fb042c62910c34be16ad91cbbd71fa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663075, "uuid": "7f473e40-39ed-4906-85cf-0235908a4bbb", "comment": "Malware payload", "value": "9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663075, "uuid": "03daa78e-7031-4614-b499-aacbfbbd76b1", "value": "T171C08CD8009C383C7124B888DFC102C284669009A4A03EC154DBB62CC27CA27C88E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663075, "uuid": "a936262c-55e8-4eb4-84c8-108dd5d5fa98", "value": "3:qVZx7ihxINq2nMLdrRK0xQxINq8VP5YNamEQfz3ZWhBbZ6iFi:qzx7Xq2udrRK0xpq2P5nmJ3aB96x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767663075, "uuid": "230d9a5a-a13b-4d30-aa02-74b85dbff3f8", "value": 163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663075, "uuid": "09ff8582-97a2-4b1b-a0b6-70a91d36b943", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ba114bd-eaa0-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767663570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663570, "uuid": "db77e0a7-189f-49b2-bcd7-cfb96555a3dc", "comment": "Malware payload (Mirai)", "value": "62d6b082368a65a40f98bb3f76eae309", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663570, "uuid": "db28d8c3-06e3-47a6-90f0-6c289e479419", "comment": "Malware payload (Mirai)", "value": "d29ec5996558c581e8f3ea3b561fcf9da15d8c0eb6f0e8dff2a55ec85d959abb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663570, "uuid": "ad6488cb-f3c2-4948-b816-777369f46976", "value": "T16F138D27C9799E29F10D59B474308B794B1BE601A3872FFA621AE1658043F9CB64E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663570, "uuid": "79be2079-2f3f-49af-a7d2-fd70189d4760", "value": "768:4a59CmJ1ard+UpvaBmdn2zlnx8jUJCh45DTcCowCDCvcur7R:4imdfYmQzfcUJj5DTcVDDCvcur7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767663570, "uuid": "b280ec58-0eb7-46ce-bbdf-b09ea924a359", "value": 41832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663570, "uuid": "b6a423b3-5d76-4934-bcbb-4fa6535ede09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a8f14dc-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767663633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663633, "uuid": "8b0559da-1cd0-418e-86fc-d9eb35fce559", "comment": "Malware payload (Mirai)", "value": "30c2fe0a255d4403bddd40fdd4966ecf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663633, "uuid": "11b923e6-5c61-4ea6-ac1a-c428df1300a3", "comment": "Malware payload (Mirai)", "value": "519e4476b0ecdcaa01caa70f6e42db78da8a581e65b901b3609f09286ff7a251", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663633, "uuid": "a47a1096-927e-40e5-b4ff-2eed5439b013", "value": "T1C2332AC4AA43D9F4EC0906742477F7339A32E1391029F6D7F795E972B856F01BA0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663633, "uuid": "eca2922d-f8a3-4efd-9b67-f30a94029f6e", "value": "1536:r7ImATRaDJK0+TRI3igLOHAGeKcIGM7MygQlRbbCiR:r7TmRaDonC3lqHAGeK3G0MXwlC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767663633, "uuid": "41edd442-0190-4fa9-b4e1-40e113bb4e95", "value": 54068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663633, "uuid": "4bff25a1-38a6-4675-8f70-303d616705d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5bca6c9-eaa0-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767663641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663641, "uuid": "bcccc8c4-bf82-4712-84f1-0b7333befe46", "comment": "Malware payload (Mirai)", "value": "40dca802523c3bd6028893d3ecc2b349", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663641, "uuid": "27453da9-f229-4afa-98e6-a88bf70f0f28", "comment": "Malware payload (Mirai)", "value": "8c816e4927fcb56d770f5c01d940ff3afaa101b8de1176d5be65887341d29f65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663641, "uuid": "18da19a3-62f5-45c4-9f9b-1c6d8c6353b8", "value": "T193334A21793A2E1BC4D5B87E21F74734B6E6170E36E8C61A7D720E4EFF10A9421136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663641, "uuid": "5916e993-7745-40aa-a9eb-0d3cb2926daa", "value": "768:gYoInq90F4AmNNHP7xHfzqIDdRHuvhzPO+9jPkebC:gYbS0qAmNNHP7xHfzHhuvhzVkeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767663641, "uuid": "606ed8f3-8ed6-43c0-bfd2-d7ac8f0ac27e", "value": 51464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663641, "uuid": "d5dac6ea-fc26-4c09-9b7d-f9b545a41fe2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f4e0579-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767663727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663727, "uuid": "6b61b2ec-a4f2-44d0-bb5d-142b43c85b5d", "comment": "Malware payload (Mirai)", "value": "f7af2384a8c3187557f4518b16395e13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663727, "uuid": "f75e5df4-f8c0-429a-8e0d-c1f9fde5a616", "comment": "Malware payload (Mirai)", "value": "9457e4261de793df0a4e5d8eace97ff1acf3c8b81b1ecd4a726cb65815c2dafc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663727, "uuid": "fdeb09a2-113c-404e-9881-5697bfe01d8b", "value": "T12F234BC4A943E8F4ED1909752533F7375BF2F4361128F9C3E764E976A892B00E64A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663727, "uuid": "a51bed4d-a0aa-4714-92d7-014f218682d8", "value": "768:foMdxj8Cu/6Asolx16QgniuPW7RWam4nxKcPb1a/16XbPoh:QMdxj8CuiAsoMQgix7g4nA0Za/wXbPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767663727, "uuid": "75b32a9b-3623-4578-a18f-1658d17373b8", "value": 45712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663727, "uuid": "60c92bf5-9ca2-4385-8a6b-69c5d496ea9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c8d55fd-eaa2-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767664323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664323, "uuid": "835d3569-95c2-4c51-9b2a-b7a06fe9e205", "comment": "Malware payload (Mirai)", "value": "d24e981f51efcdbde45924dfe3ca51b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664323, "uuid": "e284bcb5-0065-4b39-a236-b7981f6ee4a0", "comment": "Malware payload (Mirai)", "value": "2e65141a37f3721ce546b645965bf2beb4910c6fa8b418b114ac73f43a52b219", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664323, "uuid": "a495d203-db76-4d84-9bc1-55bebead3b5a", "value": "T1F243860E7E229FAEF66C863587774F20D79463D627E08681D26CF9045E7030DA45FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664323, "uuid": "67c0fd0b-1e90-4bba-8a75-2e36fd7f7b91", "value": "1536:8NhbRlsZhWuMLWzdSkBbTUzTulzTTGLFwDVaMur7RXB:yoWuKW8FwDEMurRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767664323, "uuid": "b0cf593e-8b19-4180-8ef4-eadd43949a5f", "value": 58540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664323, "uuid": "6c439612-aef4-41fb-b1ec-ed7226f17efb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5226ba65-eaa2-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767664333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664333, "uuid": "fd31ddb6-0c47-4da0-b4aa-ce32546de0f7", "comment": "Malware payload", "value": "4543da4cd28611d29836ce0b99145e58", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664333, "uuid": "61e22760-7b75-48d6-b715-9a66e4294d7e", "comment": "Malware payload", "value": "95116f138582eef8a962fb96612c1d9c55b3815ddd32eb3b838cc8fe2ec1e838", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664333, "uuid": "e0b22e59-8b18-43e3-b42b-b1631c98cd3b", "value": "T1D4348E21B992C432C66709B39879DF69893DFC514B7169C7A3C40EBECD206C1AF35A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664333, "uuid": "4f2855f8-29e0-4fde-926c-98fbbb912f6f", "value": "00e004ff0649be67e6fbb756d37edeca", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664333, "uuid": "963332fb-f8a8-4e59-a0bc-188543459595", "value": "6144:ZdWB5yRPCOvNcSVe3r6r7DmTKfjz4oH9nnkBQXW:nOyRPCOvNcSVe3r4fHRxnbm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767664333, "uuid": "6dcd85ab-5c25-4249-81f8-e860d6700098", "value": 243200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664333, "uuid": "e8791fa6-92da-49c5-88fd-cadc00bc7b64", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa8c1c2e-eaa2-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767664615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664615, "uuid": "444b436a-7c69-430f-8948-75e7f37d953d", "comment": "Malware payload", "value": "f6cac4e119a4bff825d0408045447ba9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664615, "uuid": "f957b1a4-c69a-4288-a429-ab67ca1140cf", "comment": "Malware payload", "value": "5ad34f3a900ec243355dea4ac0cd668ef69f95abc4a18f5fc67af2599d1893bd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664615, "uuid": "b2064eb6-a3da-4808-999a-7879410f0c03", "value": "T14833AF52F2B140D5EA72C051AD24FB5FEFB1308D9934A6DB775449822B27930BB1C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664615, "uuid": "601906a0-8a16-4bf0-8ec6-6608b4c73105", "value": "1536:Wlf6G4GmOk14oDDM+P4/yim/1y1ejY6yFOB:gyG4JvMd/yjgf6yFOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767664615, "uuid": "c8f28e06-737f-4b36-bf60-56406d1fcc14", "value": 51787, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664615, "uuid": "c9332316-0a5b-4300-b1a6-53c020c192f2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a5e83d1-eaa5-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767665716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665716, "uuid": "20a0815d-0e5d-40fd-a261-cac0675bd89e", "comment": "Malware payload (Mirai)", "value": "17985bcbee7b989ff51cd23d71394c05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665716, "uuid": "358c9b23-c3dc-40f4-9fe7-b9341bb71174", "comment": "Malware payload (Mirai)", "value": "0ea3c2371ce328de5395578d5ea9a35ead75af26e13428053d4c4b2339e5de19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665716, "uuid": "a2f5a828-0d4b-477e-a131-a4d4bef27a19", "value": "T17B233A21BE7A6C2BC5C4643A51E38231B5B6434A21B8CB3A7D320E9CFF54554234BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665716, "uuid": "7d60ee1f-8981-456a-bf49-4507e4b0c906", "value": "768:PWZeb/+DiHKVp7Ix1+DQP9hMORO+woWxbebch+J:+ZebZKVp7IxHnMOh6bebchG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767665716, "uuid": "00b9b715-049e-4927-879b-218dbde4948d", "value": 50040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665716, "uuid": "0aaec24f-9dce-473a-afe4-907fe789f1ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a31d1e53-eaa5-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767665757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665757, "uuid": "c1923683-fb58-4eca-b7d7-baf2f780da33", "comment": "Malware payload", "value": "bf7dce2550b037b44a231d435a78de0d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665757, "uuid": "5a2d4b6b-1a3c-494f-8339-2181bf9b6de1", "comment": "Malware payload", "value": "96fa6481f01dc128b342e34dc0556f3d61b018ef573381238dbd2d6d93cfe2d8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665757, "uuid": "3368c046-51da-4c32-b6e3-be186bf814c1", "value": "T10E93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665757, "uuid": "57f60f1f-4f84-4e85-b020-139c2620ea87", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPXLIH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767665757, "uuid": "2d86c1a2-4cd7-4eea-900d-d54dbc5e2938", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665757, "uuid": "a89a7d44-9fad-465e-b249-1303b5951999", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b28476a3-eaa5-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767665783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665783, "uuid": "fa337d98-5f6e-4a13-a4d6-3cc3b23d106a", "comment": "Malware payload (Mirai)", "value": "429807e454baa217167c22f607133a98", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665783, "uuid": "9a0c4421-8573-43a7-a90e-2264e5d2a4bb", "comment": "Malware payload (Mirai)", "value": "027e6f3191a718fac22772ab50577ac224e86f0cbf8fa8579cf41e63be4be338", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665783, "uuid": "5b60b7ea-bc6a-4876-baaf-2134d7d50d44", "value": "T111D47D5CFE4E3C42E2C7E2789A4E83E1732771E4D72391A37982421CD5CA9D9CBE1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665783, "uuid": "cd85baf5-0830-4115-ad6a-9118f98fa93a", "value": "12288:zHyh7DgoAT3M442Jpg+huOkEwZ8LLSkpSbGToSJ9HVBtw5kXFqm:zHiwoATRCOkEwKLLltTzZU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767665783, "uuid": "6dfd7ff8-084a-4e34-8dce-79cc80e3c141", "value": 639248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665783, "uuid": "d11f0b21-0ae6-4429-9aa4-b18cd0818193", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "220ec754-ea73-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767666005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666005, "uuid": "82cc481e-0a2b-4b46-822a-2cd8ac2d59e7", "comment": "Malware payload (Mirai)", "value": "1d69b067f1fe3e73cd5b44301e6cc276", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666005, "uuid": "da17504b-0b2d-4cf3-96ba-0fa20bfd3bc1", "comment": "Malware payload (Mirai)", "value": "2847e61a7000cdee529b8bfbba37501bc1c1a4a4b7b8175b35c08a20c22fa335", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666005, "uuid": "ee6d545f-47ee-4e86-b420-e58824900116", "value": "T17F132A97E004ED7DEC5DE33EC5571909B130B64586810723F3B7F8A39D712A8A92DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666005, "uuid": "03258a59-7204-473a-a76a-6cfe5e2853a1", "value": "768:Mh2HLDp78n8W9OLbACi+IJTyNtqolavZYnyvbghxjZWpd4wDrG7W8yTGoPlk:S8OwtqMahrTgXZWpXDiC8yaoPm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767666005, "uuid": "460cec51-6e73-4fb4-9ce6-8799276c5717", "value": 45288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666005, "uuid": "cd282329-fa1e-4e6c-b231-5b1fac1bd212", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1767666737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666737, "uuid": "2d30cd10-c795-4a10-8ef7-161e82ff3a04", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666737, "uuid": "3724787b-28f5-4d95-bfbb-3215cb1c95cf", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666737, "uuid": "8e3afc11-61be-4107-8fcd-d65c7863f1ff", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666737, "uuid": "6659b13a-eb2a-4685-a727-b3f8be1fec06", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767666737, "uuid": "d33a5949-d0ce-424d-9b3d-9594abba1384", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15022485-eaac-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767668525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668525, "uuid": "c09360dc-442f-4aca-94ed-e63ef88d8de4", "comment": "Malware payload", "value": "5f389eafefcf2f5a18d95abde8a54323", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668525, "uuid": "148677bf-17ec-41a5-8b83-9176560c3757", "comment": "Malware payload", "value": "ff3ae984f0365bf8bd8d8b4b425a5e1cb8570adb2b8d6bcc4e21cb09216c5caa", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767668525, "uuid": "a27aa7ea-5701-4f5b-9607-d823a8400e42", "value": "T1FC322007A3DD03DCC941A3E8440BF1DE7998A25E362F21A4F6ECD91E762AC783529D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767668525, "uuid": "71d1d4b7-df36-4b65-b868-66b4e02fbe60", "value": "192:WaFkhKjfcvMlJHaUelwEC7jGHxsqOcGd5FfayDPYvdyFIYrz+J6kbIv3knkUNVGW:QhKzcvMlJH/1ECPMxsq9Gd5/DPYvdyFI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767668525, "uuid": "df75f79a-f433-4c64-a195-f4371a2310fa", "value": 11965, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767668525, "uuid": "775e7a30-ea38-4778-8673-394fde7b453d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac47e5c3-eab1-11f0-8990-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1767670926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767670926, "uuid": "ded0b05b-aa86-4c3d-8844-69d4077d885d", "comment": "Malware payload (Vidar)", "value": "9c1e0aad3e5f84784aecdd96f47c9630", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767670926, "uuid": "a6b8d9f8-9d2c-4636-930e-5d9929606bd1", "comment": "Malware payload (Vidar)", "value": "d62ef0a828a92ac117fe34edb2aacc21a4c5cf2cca0897d9e86d5898d4c485d1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767670926, "uuid": "8251ae66-7f1b-475f-ba27-6741324e6ce8", "value": "T1C214136EA19E1010C12B93F46F1F40B48E1BBE9A254EC7EBF4E6E0EA49F10844D751", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767670926, "uuid": "973477a4-f258-4b1e-83ff-ddec8e7ccd8d", "value": "31e06ec6723bcc3b75c69a4521e4b8f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767670926, "uuid": "758682be-26d6-4e79-8bf2-b4a3823f11ba", "value": "6144:KFzhDNPB3hHuUWwfIKIS5Q9usw+jiBJp2Zd:6hn3hHuUtfIKISiuD+jifp2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767670926, "uuid": "3264cb78-a28b-4fac-8014-01c34d0afe7e", "value": 199680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767670926, "uuid": "64bec1d9-85aa-4b28-8477-5813c54d3694", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d1c4697-eabe-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767676458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676458, "uuid": "b3397426-fdad-4d82-bffe-91f9e35c984d", "comment": "Malware payload (Mirai)", "value": "d0a2cc99207d468bee28aa5829824b5f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676458, "uuid": "76365b73-05d1-44d2-a156-375d2e6eb581", "comment": "Malware payload (Mirai)", "value": "db1db257053f32f916c1c4ef1c4f850b213caa8f3337e8caafe777a58fb1ea56", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676458, "uuid": "e0d10598-38d3-4abc-a84b-c14c6fdeeb0e", "value": "T110C44B59F8809FA1C6D52576F74E829C33134B79C3EBB20699145B343B9B86B0F3E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676458, "uuid": "0c0fcd1c-076e-4547-954f-46b2eee3159e", "value": "12288:ZZfAg0Xpn7NGRNeWvKLSG+t2ItsgpZ6mdZ:ni8RoWvKuG+kIt+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767676458, "uuid": "14862f75-c933-4dea-a508-8dbb3d675a7c", "value": 554156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676458, "uuid": "ec0163f0-6d88-4b5e-bef4-940ec66263bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec57c389-eabe-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767676617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676617, "uuid": "71af8060-4127-49d3-a053-a5f715b98f6a", "comment": "Malware payload", "value": "99311b87a6dc2507d022d57847a02238", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676617, "uuid": "75000a87-ed75-49a3-9eee-b6ed494c7923", "comment": "Malware payload", "value": "a786c44ffb83e6b7fcf9d3a3fcd23cc4218b566a7cd5e5025ca6a3d3a8a1b94c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676617, "uuid": "28fdc387-1327-4aaf-8198-728a12c1ddae", "value": "T163B2C671D0AD447A7B4E87ACD080B324699DDA31DE019B7676FA309C9B84EF620B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676617, "uuid": "1b03de42-d7d8-4398-a669-f0196ed4771a", "value": "384:QhERh4o3ZdqZUaAekWbUNb3fOhfQjJNjPPJETRIawkCiFKpJkTobVpLLKBXEK:XrZdapNoNUIzjPPIFWLLPK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767676617, "uuid": "3dd6a199-5c84-4900-a1fe-a718879a7980", "value": 24438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676617, "uuid": "1317bd35-c75a-40d0-8d91-3da6be9e941b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e154785-e678-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767676868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676868, "uuid": "0aa094dc-985c-424b-9d60-c5c572045255", "comment": "Malware payload (Mirai)", "value": "36adfb215a9f1c13931f3f16f4dde8b6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676868, "uuid": "6c71f7ca-e580-447d-9dd2-e307224fc623", "comment": "Malware payload (Mirai)", "value": "6091591c65e708bb1c7b6912438880bc14992de4e04939eec216a6ecd6dd93e0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676868, "uuid": "068d420c-8314-4a04-8c8e-05b2a8c13a06", "value": "T1B4E3930E2E218F7DF768833587F74E31975973D626E1C685D2ACE5021E6034E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676868, "uuid": "8514485b-5176-401e-9ce2-7419c9430e80", "value": "3072:aWTmCk4tXtO+7qeDnLGJYKSnGliPKeY1MYFJZj3q4inJhSaH39JhL0e8Wd4Bskg/:aWaCk4t9PFDGSnG4fgbvcdT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767676868, "uuid": "cffcd2a1-5fe6-47d5-8572-f99291fb1069", "value": 146808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676868, "uuid": "34f83bc5-9612-4a00-b496-83b0c8593654", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "527349f0-c5f6-11f0-85ba-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767676868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676868, "uuid": "46d796ec-0780-4f5d-8537-80eb0eb2fc3e", "comment": "Malware payload (Mirai)", "value": "903f54f273c6c8d47c3b955c1d72bcc8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676868, "uuid": "dee7502b-7d75-4b12-8e9e-afac1aba0afd", "comment": "Malware payload (Mirai)", "value": "a1c3941f2e6e7a2099d4cceb16d574744904ec24c0b83e7aef9e34140d7e18d6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676868, "uuid": "3b9e6507-7944-4c91-b970-08249bb1c7ba", "value": "T180C3B30E6E314F6DF769C23587FB4E21975873D622E1C685D2ACE9011F6038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676868, "uuid": "127ff312-6778-4e41-afab-71a00936e463", "value": "3072:7dfG9F2+O6N56RHgbodhAdNg5hZ33ZjhkZY9rPFPLDlMu9gh8Q+LJ7HP3MwlUn58:7d+3K6qZRvz6pS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767676868, "uuid": "9e326195-4365-4302-851a-bcf4b6aac833", "value": 128728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676868, "uuid": "86dd6338-a950-4c20-b49c-78c6aa7cee9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3381847-e678-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767676869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "abaa396e-3063-47f8-b1c8-1fd62adf3473", "comment": "Malware payload (Mirai)", "value": "41f15196243b802839aed6fcb82b7784", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "e79b242d-ccdc-452b-9415-c705301ac174", "comment": "Malware payload (Mirai)", "value": "79f5ca34a62727003ef76416baa6ece3b7644a6e9d6e581efc32025df3bd86ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676869, "uuid": "aa74f1b6-88c0-4d6e-9021-dfbb514ab0ab", "value": "T1C6347386AFA03FFFD85ECC334295DB09169C590A1288BFB66A74D504B68B10E5DD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676869, "uuid": "c43c5dc7-55b5-4e15-b357-decfa5d243d9", "value": "1536:EIfsqw2pNb4Yd/FhI7OC1i1EtVSf6MQrbDr4vwg0bSnlLkcxBJ8dysElg48n5Q56:E2Djb3/FhIDRM3qepBJ8Dn5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767676869, "uuid": "803bddf5-8380-4ac5-9235-e59033d10048", "value": 231704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676869, "uuid": "d5b127b0-e005-4d0b-95d8-beb798a56734", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02f3cf5c-e675-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767676869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "777754e2-8856-47d8-ac05-751ca59ca940", "comment": "Malware payload (Mirai)", "value": "6f286d226edc13d925e195d2d13598d5", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "da635085-907a-4afc-828d-2a38d4d9f1c5", "comment": "Malware payload (Mirai)", "value": "334be9f7f5912edbfeeb0687e31aeb1171ddbf06ca3f48aede3f851584079874", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676869, "uuid": "81de1876-580a-434a-8e81-bf3790348069", "value": "T194D3AECB724FA850C46106F00BCB8FCE2E5362128E17C9E76D1E667A39795CF1A167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676869, "uuid": "07086d79-cc2a-40e7-bc16-ede70641d81d", "value": "3072:SLtWQSeBf35ZBjlW/cJBhAQrFG5iTt9I/dAKgcnwq:w3ht3W0JHiikF8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767676869, "uuid": "fc0ad3f7-804a-43c0-a990-3794fba98801", "value": 132464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676869, "uuid": "e529a943-e431-4118-919c-eddf91c3672a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec1d628-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "4f841b94-cbae-45b6-88ee-b277cc18b703", "comment": "Malware payload (Mirai)", "value": "6497278c0a76b3e73b8d5db76f2e896c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "c4c0fe07-8116-4803-ac82-9faa51770c5d", "comment": "Malware payload (Mirai)", "value": "612e5efd070fe89073a2b5488049d8fa124b05778839a030eca74160443750ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "4e899221-1328-4c3b-beae-64d917c13ed3", "value": "T133B36BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "77bb60ee-c3da-4ca3-890f-17af853be209", "value": "1536:WTW/VCxsHZusj2Li62C8XiKTRpP/PVmAVoWWczTW+A1P7j:WytCxsjx62N1TbVmFWWMTbWH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "20d302d4-8f6b-4b0b-9c68-270ae6235b45", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "a0cfe221-73ca-4f2c-bdef-ec691dd2033e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec73eef-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "a8506ca8-e698-4508-8d5f-93d63aff25fd", "comment": "Malware payload (Mirai)", "value": "3d4b0ea5b280fd3c4e199e7ad4ae0f86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "0af0e003-1c45-47a8-84d4-c12bdb441fd9", "comment": "Malware payload (Mirai)", "value": "44ae17d47e7923fa97ef43e7909f912448613e5517c403b77c73f3f6a80008e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "799fd91b-e655-4775-be50-39062e7e8481", "value": "T1DBD35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "bc5edb8f-be40-4e59-a632-abc6d461599f", "value": "3072:79eSuygEPjt6qkWq2dKmDnYMb0gBd/gQyVGsdqml6uaj:79eSuygEPjt6qkWqNeH2laua", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "a42eab3e-61db-4fd7-89fa-9de8d24ae8f7", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "988f0057-e151-4b5f-8917-94696c79892f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec7c169-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "91161247-c07f-447c-9b62-1251e218d2e7", "comment": "Malware payload (Mirai)", "value": "c8a0ca906eace18c6368bb44fd48841f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "f0c21a19-eefc-4924-8e71-d6886327158d", "comment": "Malware payload (Mirai)", "value": "999aa4e2c9ad2f3eeba4bd959dd124170d8ee18118e4dbcf1f7decd563c123f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "03dd4bb3-b28d-4b39-b4b4-07f86a0c363e", "value": "T19FD32A06730C0A47D2632EB03A3F67E193AF9AC121E4F640355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "e4ee4d17-186d-4406-a402-b4a1ab9d3e45", "value": "1536:troGHNTUZN95IBUiCxfytKteQQvhDajwso7lbEJvAhh3rp+JuQfqAE87ynJ:3mkUiCxRteKwF7lLhrMmnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "9d95228a-89b9-4b9f-bbb9-6e01173fc1b5", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "d24c3f1b-9d0e-4da6-9125-d91816b67f16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec8e998-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "05b4b2ca-a3ab-493c-828d-6968ebef0a52", "comment": "Malware payload (Mirai)", "value": "8aad3c4ba50212c98a0862484aedf8bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "96b6cefe-9564-4396-91ef-3e820fe56098", "comment": "Malware payload (Mirai)", "value": "094c01ed43ebf4822dc7c7cf97c4475bcccb3b54f201569802ff32529838f469", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "753cbb74-05fd-42a1-87cc-da8cd0822ec9", "value": "T145E30A46F8814B12D5C111BAFE1E528E37131BB8E2DF72029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "cc8cf64f-974e-4364-afa7-12e11ac8cd34", "value": "3072:yneaYC/9Uau4JQXkDHTz9ai5oudNV0/4fLU:KevC/9NBQXeHTpaVC0/4fLU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "1366cad6-9e3e-42ba-bb5b-aa5e572e05d4", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "feb511fc-c2e8-4786-b244-828b5e2cdece", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec90fe4-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "9433314a-654d-40b4-aa24-e125597f28e0", "comment": "Malware payload (Mirai)", "value": "6aed289bc2ab69f4802d33fc7a553303", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "97013c2d-7207-4eed-8060-683b90a787d2", "comment": "Malware payload (Mirai)", "value": "1843a15a9af1ed09a4b2f5482b64f6b1f0ba69af237fec4f849d803290503694", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "1077e3f4-1d36-4ca2-b507-cb65f53cd805", "value": "T1F6937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "baa0e44e-b942-4451-b658-c30eb5322189", "value": "1536:W/QCZaxGdvts3i5JPhofsxPu++4HRsUIKqI4FrS4LSl:WYCZa8dvm3oJPhisxP5lR+KfUmDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "cd1ae4f1-16c0-4699-8857-6dc0c2eb4fec", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "98524e11-2910-4a28-bb47-b9e60e8f5235", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ecb76fb-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "3c1e6099-b601-4b78-9a35-f7ce325a47c9", "comment": "Malware payload (Mirai)", "value": "2184f59001b2f20afad2466e5982103a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "920ed139-960b-4452-be73-865171c991b2", "comment": "Malware payload (Mirai)", "value": "b68fd0e15767f110f2f20c6226d97c33b4dac8327b63cb28a16ff90fff1c1986", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "09b81d56-0fa4-46e6-9e0e-6f42619e9920", "value": "T15FE329C7F800DEFAF80AE33748570905B630BBE115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "fd495c32-d18d-4353-a54c-0c72f4538f78", "value": "3072:GmzTDH86JM781q5lZjApqGidS8w9aeVvjbieL/VCyIOH8Vn:G2TDH86JqPjApq3du9a4LcyIrVn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "c0a413fd-b619-4e95-bd3a-f70d9e18f598", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "a9903611-ed33-49a2-ae39-05715ac0c72a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ecd4e21-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "0bed6c3d-b5b3-40df-a77b-41ea6c5d90c4", "comment": "Malware payload (Mirai)", "value": "05d5f1ac703f087f5bef2875cde34762", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "c7b71a89-8221-4e99-9f0c-1b54c442ef16", "comment": "Malware payload (Mirai)", "value": "518014dcfa5c71c360a464743c489a2fcc368ffa9ce73585a0dd4de2a183c225", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "a96a29e1-b797-4358-81d6-9b4a66464589", "value": "T125042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "8f888d81-ac9e-4296-8cf3-40ccbe9bd984", "value": "3072:OzeSvtfD84oALv2eEQakGzORuGMzw99L5d38YhTfYo+M/RM+FDhdLn:2eSvJvoA7TEQakGzORuBGL5d38+x+M/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "251e5c90-ae9d-4568-a3ef-5139f7ce1d6f", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "5b06242f-888f-4740-823f-b5558e95266b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ecfa52a-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "04959ccf-e2f2-4489-8cc7-826616acf0fa", "comment": "Malware payload (Mirai)", "value": "b948107d8ac24aae944112afb74a5f1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "23e40e8c-2b7e-4366-9752-d926d372d0ea", "comment": "Malware payload (Mirai)", "value": "c4e2097dcd74ffea3b1e0626d2255efc9d617cb02a074ce84ea482febb1541bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "2f391a0c-dc46-471f-86f4-0d3f4bb0c05c", "value": "T15FD30845F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378696B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "07a7e7a5-5946-4e87-a62c-38c8bdc58031", "value": "1536:QKdzElm18uZJNb4AXFa8eAZHk4VB7fzTTnf5mgYivCyeqZ/Z20lCmwyw6RNPUTuM:QKp50oU8e947L3f5mziPtRZ55ZKH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "5e9e6bb1-b2e5-408e-ad04-3cc69832ab13", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "a6157e82-ea78-4441-9801-61b70c815c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ed00892-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767677588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "3e7c43ab-e6d2-40c1-8c6f-9474f36c6c5c", "comment": "Malware payload (Mirai)", "value": "001200dbb807d73c21ce2d34cc2c92a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "d2f31c7f-d936-4062-8907-0b1f07a4e7e7", "comment": "Malware payload (Mirai)", "value": "c51c526c1247a032e895692946c5ddea9c1eff44ecbcaa7a9eb06fd6002ac920", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "6cc3a6ff-45d6-4a62-8c07-492d6d1349cc", "value": "T1DAC31B45FC405B23C6C611BBFB5E428D3B2A17E9D3EE720399255F60378686B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "878871b0-de03-4ff4-a27b-df245b976f48", "value": "1536:pXKa0rG5yC/cMChygtwOBdWFAcJX4VlgXTA70FoDUGBr7k51WhPV1lHFwywEReQm:pKaprMh7eOXWFh4UX40FoDJBkvWR2SH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767677588, "uuid": "330666b0-828b-45e5-8ff1-6717e0b12109", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677588, "uuid": "f04e6d86-a31c-4c80-9d9d-380364214998", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b711a2c1-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "4c7139ee-def6-49e0-93e4-f1339c9d8489", "comment": "Malware payload (Mirai)", "value": "81e22a4a071efa309b1c6d1e42b18f4c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "4d5d6802-52af-49ce-bbb4-1244720d98b4", "comment": "Malware payload (Mirai)", "value": "82ade37f77110904aa9e73f0d1e4811a38f4b1b80268ccf57d46a69bbee38003", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "50776a12-30a6-4aff-b688-03698c0df9cf", "value": "T188C2C021F25835E7C3700C36E5B18A8ABBC95EACD36A711366164B446BE3502E7B84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "db3ff4e7-76c8-48a4-bbe6-c1b5ec5eaec5", "value": "768:qGjq311+vPgN6cvSK4a4VFaNKL09q3UEL1w:jql1welv6HVFkKpL2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679874, "uuid": "2518dc36-8224-4832-bd8b-191e88a24625", "value": 26676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "d5fa3908-f303-4779-bbe2-8d7d0b9a3373", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6f7f915-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "65421b68-4e36-4a46-aa9c-a77209f4882c", "comment": "Malware payload (Mirai)", "value": "76a3d09cc49e70956614d13648ff8edf", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "3991dda2-dc73-4c67-8c9a-25c6900254b4", "comment": "Malware payload (Mirai)", "value": "3afb9255073dc3e42dde306f16d2f1e125b6320a973f1897e1fd80c0ea603647", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "e520561b-0f05-4847-8cca-95ddd160280e", "value": "T114A2D0538A4A2CB0C1B07076DF3E869791BF53BC91F9327452E456E8BA1749740AE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "0de0e726-ab7c-4b12-8a3e-43c15b819710", "value": "384:ZmrfsdF2cdH765GzufZ0Ilkzj52RVdqgkoCPbbMpe74JBhymdGUop5hK:qNcMkSPlyj52/dn2Pbwk+s3UozQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679874, "uuid": "f9350cfd-8a35-4b85-bf30-0f9dc81cdff3", "value": 21356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "9401bceb-35a3-4650-9afd-ab49c60f9df8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b715ab1c-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "ef628b53-4406-4f6a-bc30-578de5a64e99", "comment": "Malware payload (Mirai)", "value": "f5f81e9c07f7b5a72e80a3f93973847f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "b1d8f5e9-96dc-4d25-9ccb-6c64a2d71c77", "comment": "Malware payload (Mirai)", "value": "baf5208fddbb85feddf5c52684671059656d59b7e72243840d90fe47831c1237", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "7fcc171e-f990-41fe-b8de-ff34fa1e74f3", "value": "T1B8A2D0B0CAE57E92D6EBEC315CD4D9D417E81DD52E2A0AF934C56341A20A636FB04C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "5291875d-c6c0-4b9f-8722-d8fb52c8e5ed", "value": "384:4UL7JIgYJcmNjagkKSwqbdA50kvZff8Cgua6MIv9GTRiSrkV64DFM4uVcqgw05Vz:vylvLSwqbdCVf8rua6MS9KiSh4Dq4uVW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679874, "uuid": "dcda2739-1669-4777-a83a-93eab18cce0c", "value": 21312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679874, "uuid": "b123a7a5-a9fb-4ead-9a5b-2d471c859c16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6fd671c-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679878, "uuid": "c1ef79d0-71ec-410c-b61c-b4b57fe90d8f", "comment": "Malware payload (Mirai)", "value": "578508cb30ba7333a47d5a70983d0280", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679878, "uuid": "67ca977a-9535-41f5-95f7-7910a4d2d191", "comment": "Malware payload (Mirai)", "value": "538d21fd90de70ef80ae4984eaefd1cf44ba051f2b46e4a81f55b7d7c28940a0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679878, "uuid": "f7b55f09-70d3-4959-9768-77313b3c493c", "value": "T1F0237D35E41D9EA0C15A4174B0AD8F341F13F2C893632EFB1AE646B1A453978FA16F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679878, "uuid": "608f0ea2-7c8d-4e6f-8b8c-a6173a0097ee", "value": "768:GagaFeYpietGeydtoLrkarUqf7ateqlbJ9PSyC1o5VeseCzKwP:Gan+sGFrC6qfW71Syl5heCzD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679878, "uuid": "4651acb4-6ba0-48ea-8d13-eee9bac60be7", "value": 47644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679878, "uuid": "2cabac6c-995a-4b50-9e77-662d1fb9d221", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc05af23-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "c67d2e7d-9291-4337-8f79-8a7786562fe5", "comment": "Malware payload (Mirai)", "value": "e4ee0220e73e0ab547aaf227dfe19989", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "ccf94589-e099-456a-95b2-07276aacde52", "comment": "Malware payload (Mirai)", "value": "15fe9e1f028f0f5b3dcaa8f1bd8403d658dc22f986b9dff2ca60ab62ae45165c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "f2327ce7-ca38-488b-87ca-83df0e252001", "value": "T1373319CAB8029D3DF91FE6BA54164E0DBA3177C111830B2767ABFD937C721A85E02D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "67d27d22-5ea2-4284-bd6d-390429e333a0", "value": "768:zIPq4mGrLNtsbX22lXJwTc826Mt51zhhFXOPdSns2Gg:k5sz22VJAc826MZhhFXydS4g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679882, "uuid": "9893f174-0d12-49e0-bd12-5163aaad6610", "value": 53472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "6d51f5fc-bdb3-443d-b092-db7cf3a9dfbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b722f813-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "63016880-9d38-49e5-bb2a-aaca7914289b", "comment": "Malware payload (Mirai)", "value": "e541175e77b1f96e90324a96651d0368", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "2260146a-c0f6-4cec-a3c9-79fb4c625a48", "comment": "Malware payload (Mirai)", "value": "4818a495709fc6cc5a81b295e8fc82fd45799f29e6d1b3d225f80d28f49a64a2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "3e8ac08d-f875-4c51-940d-d21f9cf0c0b0", "value": "T13982D1B09398DC90D4B49C71E53D8A8275A753FDC0F830661009075CFA93ABBBB69A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "773f23ed-41ce-4a93-ad27-eb257b99193f", "value": "192:g15fEyQZR/pxwQXIzAC1/JTIxhOoOVJsFq3FIWihhNw/mdGUFR9CpZ9eHHqEEhIB:a5fED/jUZtJShhPhhymdGUop5hIB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679882, "uuid": "a310d0a0-06e8-49d4-83d6-c4155ecf992c", "value": 17660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "1a9c143d-6dd1-4958-af2d-fe9e00a26e49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54ab6d42-ea50-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "9fc06e49-c100-4df2-b79e-5a03b98d8a5e", "comment": "Malware payload (Mirai)", "value": "7f7b2b5ac838e3e3075f5cca83056ec7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "f63564b4-73c2-4d46-b21a-924b29282f96", "comment": "Malware payload (Mirai)", "value": "8946e27fde02523e175cccdaa694bf8cbb2884b4290e6fe9dab228f6c5a2d0b2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "971b0d49-6512-49d0-a038-468f246ccd5b", "value": "T1FDA66B07B5A714FCC2BAC530466FD672BA30789441257EBB3694DA302F67E201B6DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "17a9676f-b0ce-4bf3-99f5-504538fb4c9a", "value": "98304:HumS1Xn3QdjukKI7rGgooWxRycNgKn/EAMrKnakSOElE2umKeDJX216KWeIQ1z/3:Mt2OGKeDQZ1aLOf8We3ZIpptaLBvYis", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679882, "uuid": "c22d26da-b0bc-4b7f-9c27-019caa5e9c71", "value": 9815608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "f11a3a08-de64-4b41-8f9d-c223ce2bb570", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "350f5f73-e7da-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "bf33bafb-f769-46b8-a856-14ffd0a4b1e1", "comment": "Malware payload (Mirai)", "value": "1d33247abca4a74d9e803932308891b6", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "e38248c2-6a9e-40bf-94ae-548853b6ea2d", "comment": "Malware payload (Mirai)", "value": "0a738b152b074a3ca38a9da6d95f6423a5010e7e356739f64ced1b457a5f857d", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "5aa644ab-18de-4318-acd7-cf82e7102bd3", "value": "T159B37CEBF2470690C86246F007CB4BED3E2322815F27C5E73D6A657968791DF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "95713b4f-37f5-4973-99fb-45ad6b32e797", "value": "1536:v8GGSBwmtSpt8kwkod9MML1W0goB/LWf:vVzty+kG9MML1W0goBq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679882, "uuid": "876faa38-7067-4b8b-a1fb-fd749602e7b9", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "97b5ec51-8d38-4998-9af6-f8aa3d4cd80b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9276859-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "cd6cec65-a548-4114-845d-e0570ae632c1", "comment": "Malware payload (Mirai)", "value": "e7ec4d63b4fa441dcfbce4905155020f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "b9ef4248-cf75-4f73-9cbb-d7a9b22b9b6a", "comment": "Malware payload (Mirai)", "value": "dfd2dbc01ad6c47c42fdf4d3ce0e3d3d495187b7a6be5f9197297bf6353ab163", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "8ccee149-7c3d-4745-96a8-fe969d332ee0", "value": "T10BB2D0ADF951BA8DC99D8CB9229A8BE04F50F881731B9FE95B468DC4D638A47B40C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "5c9efe44-eab9-43bf-a490-4e3287015d92", "value": "384:TdjePUORTVRqNMq/E4mXkWJv2M678IJQQ3HO7TraJNhNszdzVrVFG6Sit5RWGVCN:TxePP4Nc0ev+T4vrwNLsz/fG6SixWCq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679882, "uuid": "d0bc33b0-addc-40e1-aab8-339fa24ac107", "value": 24152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "62bcf7d0-997a-4655-97fe-294aff45ae69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b71225dc-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "95668ea2-ac2b-4073-93da-315de1977c99", "comment": "Malware payload (Mirai)", "value": "4d9888d3ff8e5ba6b80a5bf619e6ab15", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "0adfc4c2-2594-4ef5-a5cb-0951294c4ee9", "comment": "Malware payload (Mirai)", "value": "d1d13fdd3bb487ed4b4e2dd5f07607ea4d7e4946bc9759ad85db0a0510b78324", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "8ac53d98-fe5d-4695-bc1a-dd6d22d7b82a", "value": "T1BA431921B9761F13D0E0A47D11BB8B19B6A156DF26A8C64E7D720F8FFF216846803D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "929b899f-0ba5-4a50-93b5-c01b1e3138ac", "value": "768:v9oOx2ffc/P4/gm62CGShU0cfDTNxFmlJHsnjuVnDXHYjO+EdWTwi:v93x2ffc/P44xwShU0cfDTNxFmXTyXMi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679882, "uuid": "34b3afcd-ac0b-4ce6-a6ed-a0abe1b5d616", "value": 55480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679882, "uuid": "a09bde42-cbf0-4b1f-af6a-e75f16033cc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52327369-ea50-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "de1a7f25-6df5-4850-b294-37516b766664", "comment": "Malware payload (Mirai)", "value": "351a600abbb7db85ccb796046b1ddd91", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "f3f82043-443e-4f9b-9d7f-5e4f146e4b33", "comment": "Malware payload (Mirai)", "value": "14bd6c4f11b6ca0b04150ce7890757160544d57ec8354aa7d52a7c73ac176e83", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "03c1d589-3112-40db-bcbf-6ecfb30ff6ec", "value": "T111B67D49E783E4B1F26344F02B87E3B7652016259067F1F2EF8D2765B4363816F293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "3c903bfc-2f27-453e-8929-5fd42464418f", "value": "196608:AeSLtF6MSWb8bUJSbhltUxfxBfTO7vkJsXS0PJzvzsKsFeMKBs:AegtFgWb8bUA18fTOnXdpvzs9c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679883, "uuid": "53f4867a-bafd-472d-b0c8-777e81025201", "value": 10936756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "88005adf-2c77-4be8-884c-6e1a160be99e", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b732c7f4-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "1570d6bd-1308-4586-8a94-679b3f72971b", "comment": "Malware payload (Mirai)", "value": "757e843f15ee5d760da0012518dfdd3b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "f96b7307-e9a6-4756-a0df-e2074c4a08ec", "comment": "Malware payload (Mirai)", "value": "1756e31fc7f80e4f10bfc0d0d43bc91a448d70a1b8695de90a28bfb9d3da7b9e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "50b826c1-977e-47df-a805-6f8d59a48954", "value": "T12623F1274BAD4CF3C73944F6F48F8E626AA60EBCB25C306607A141317ED926091F95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "a709fbde-d62d-46fc-b41e-d7da284e18f2", "value": "768:FIPyGLHYwzIRwMDpcC5HVpdLFR09q3UELU2yAfodLXtTzFuvp/fpxNM:OkwzIRxDL5HfzLU2bfodlu/xM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679883, "uuid": "3e6e487c-ceed-4ca7-b512-1798ff7d7cf9", "value": 45984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "8ab99237-fd2e-4341-aceb-dbf9a0d509e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b71ac0d6-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "3f7323d7-46aa-4368-883a-93ec5798eb66", "comment": "Malware payload (Mirai)", "value": "39cdb0a90cf98eb16a0c9c114d58a64f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "a154d189-19ea-418f-95c0-13fbc1876482", "comment": "Malware payload (Mirai)", "value": "cae2a6662afa818ad96d55f1885936cf3b6bf65cde8e5de1329c02ae44bfe21a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "3ecfbc7b-0fd9-4a09-996a-3d73b0bf35cc", "value": "T1B092E0B51B071D07C59A1A7A310F04896D2B18440F9E47F7BA3D4B0A1E43DFC813E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "54efcde1-c1ae-431b-9d29-a995f49b8ea6", "value": "384:M85Lzj0CwfYQgSS3hBni80Ot8O81LLzuyjcCTON6dGrXtB405f0Kgpr+v1R8M6:xLX1QWPJ0OtgBuCSEduB48Eq8M6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679883, "uuid": "5d50222f-ebda-4c4b-b0f7-bdbe7860ea03", "value": 20992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679883, "uuid": "70450475-ec18-426f-8443-b0507cee9286", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a3dd46-ea50-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "69745127-2aad-497e-8085-d809f04b862b", "comment": "Malware payload (Mirai)", "value": "9818554a180c05d46818f74f17062db0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "b9886ac4-3271-4009-b5b1-e6c165dd8b8f", "comment": "Malware payload (Mirai)", "value": "a75ead9ca6cf03f44ed1d4f669e2c65d88bacc3b1ec572c1c778c79357bc6660", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679888, "uuid": "1944aa64-0924-4aa2-88b9-ce3c81e3a7b2", "value": "T1DF967D59FD1FBC52FADAE3389E8A8BE3B12B75D0C213C0B33A91514CA59B6D4C6B15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679888, "uuid": "0d7ffc14-ee59-47b6-a8fc-e02825e7b4d7", "value": "196608:8NEbMpaUnxD4KDNhgPZlPbUuX/nnvXtnREIA7/SLSVMs:8NEbMpaUxD4KDNOPZlPXREIATBV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679888, "uuid": "64673c8c-ebd0-4da4-bc22-078e8a1c7e0a", "value": 8836096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679888, "uuid": "4c7831c7-0b8a-4409-9581-40c6e44ed04e", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7148946-e12f-11f0-9c99-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767679896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679896, "uuid": "1eb66f50-de07-4f54-80ea-ff36aa845d40", "comment": "Malware payload (Mirai)", "value": "6083b11c7d474912bd7b5517ff866dd5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679896, "uuid": "e2e721aa-af94-4062-8046-185e3e666eb4", "comment": "Malware payload (Mirai)", "value": "1ffed5905bebafa8b156bc915d14868735b8e17d1cf1d1e21fcac31afc1d06f4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679896, "uuid": "e699aad0-6059-4eff-9fa3-b050e2f299e5", "value": "T121A2D13CB70148D6E81ED17992DA03D73F680762E0437C4D6ACAE79BDD448E0A8E3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679896, "uuid": "6b5f5ef2-ec6e-4df2-b24d-3b0bc9689448", "value": "384:GZdlERkATD4lzi1RcraEEZ1EEiepC5YfiAD+wp0iX9ENtQo8dSJgGlzDpH7uNj13:GZbERtopi1RUaEmoeFs2XdSJgGlzDpbE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767679896, "uuid": "284049f4-db6d-4d83-b994-fe7103ab1b79", "value": 23192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679896, "uuid": "68d20fcb-c9f5-43cd-a9fb-34d51e4be5c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8211b5b1-eabf-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767680517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680517, "uuid": "2c4ffe74-8940-4e24-8d7a-e3d341cb8ea6", "comment": "Malware payload (Mirai)", "value": "d45b6d2943886cd28815301320a4bc03", "object_relation": "md5", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680517, "uuid": "a86415fc-5a6d-4df1-8466-05a00ceb8f0b", "comment": "Malware payload (Mirai)", "value": "c4784ae0b9a3c53c3a743f743c413305549342a3cf9d3127bcdfd4a2ad177af3", "object_relation": "sha256", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680517, "uuid": "02e3bf11-09b7-4754-8bcf-89767052d830", "value": "T16431F7CF342C4A72378EDE87A3B1754D15928DE217A40DB49FD4486EC9E8E68B748E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680517, "uuid": "955ef50a-3fd8-472b-acae-aca484aadc76", "value": "24:I9dT9TpJrdTJT/dTWTcrHdT/0T/I/KSdc3cTdgOMbf5dc0cISHdT3Ts+VgdT3TsC:S33trHFXtONttQW+CW+C+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767680517, "uuid": "4653dc6f-5bb3-40c1-89ce-9c1d82c7f66f", "value": 1677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680517, "uuid": "ccc50d36-393f-478e-908a-10caa7ccd419", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c03fc2ec-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767680838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680838, "uuid": "ac8cc37b-1759-463f-a6ef-fcb416fa2b9e", "comment": "Malware payload (Mirai)", "value": "eb8fb64e84d5209edbebc9b886022873", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680838, "uuid": "185f4f70-0060-4e5f-94e3-e780c3619651", "comment": "Malware payload (Mirai)", "value": "f8b6942c7c8e78fe74e96df61f634dae66b74fddde6448548491ef1834be4bf1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680838, "uuid": "dfe87041-d272-4ba9-a51a-15b45b8f9f25", "value": "T1E351DAC912B2C0B16CE7DFE776B9998073C090D398E7BF54E5D878E846DEE18A054B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680838, "uuid": "a02a21a0-29c9-44d0-b1c1-dcd06bfeec15", "value": "48:vr3mvQE1AX8qoxaQQB0qmoJHlv3ELxJAOhm2XVF:vzmvQE14qmmGHlv3ELnAOhm2XVF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767680838, "uuid": "44d3cfa7-711f-4791-8414-19a9fd5afb41", "value": 2490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680838, "uuid": "bae646ae-fa61-4f2a-8294-1ee95eb42153", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c173d4f2-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767680840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680840, "uuid": "aa6d8a15-01ff-43ef-86f0-42e993969dc9", "comment": "Malware payload (Mirai)", "value": "c79bc17d390643359d0524a8c98f8f7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680840, "uuid": "04912079-4dbb-438c-93c6-d7345ee0729b", "comment": "Malware payload (Mirai)", "value": "041df47a19aa70f9b120615a3cdbee36770e02b3186c5493321af28b34d6d1cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680840, "uuid": "74fe339b-5257-4c6f-99d1-143aa3e5fc49", "value": "T19B04B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680840, "uuid": "fd917371-8a79-4168-98bb-9fc607727cbd", "value": "3072:HKpzG4edkSfcQq2Kv8S6Qll3IDXIWMolt:HKY4edYQq2O6ilwtMo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767680840, "uuid": "9e691991-ed32-4ff0-b1e8-7cccfd669a1d", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680840, "uuid": "334f3d17-00e5-480d-aee2-a2df12ab27a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c358230d-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767680844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "b1ef0bac-3bbd-4b7d-9f2e-59e4e96636db", "comment": "Malware payload (Mirai)", "value": "e904c54a253e3822f7becb91b5ea39c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "df9714da-56a4-4e29-bea0-aef0f7dd8d63", "comment": "Malware payload (Mirai)", "value": "c65b158cfe0560f2c64eca0692d680003609a769e3d314f7d0e48de9234b5d2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680844, "uuid": "27c051d8-8b60-473f-ae6c-a7c5550f9b9b", "value": "T1B004871D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680844, "uuid": "22a199a8-9045-4dda-b5e0-eddfcfb62c8c", "value": "3072:/A57BE2Ln5irHKx3+xS9JOPKaTCNRmF+XQSiN:/AlBE2Ln5iauxuuCKFMQSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767680844, "uuid": "61f4a753-2f42-4f8c-802c-6c8aafb7e4cf", "value": 173856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680844, "uuid": "35cde0a8-f6c1-4496-b8c8-b4a144b40646", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3582b9c-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767680844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "83365914-3b9c-4b4c-9993-7bac6a448da5", "comment": "Malware payload (Mirai)", "value": "88915bd48fdc13c514462f3f9555ffac", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "35253ec8-71ea-4f2f-885c-9f65156b70f6", "comment": "Malware payload (Mirai)", "value": "6d38bec9fb45c22f4bd0359e2b762723be2bbbd2a5202c5da8b7740afcddf161", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680844, "uuid": "de22c2e2-cf78-494c-92b0-0c6a45cdbce3", "value": "T1AD1125D691A107F41DBAE923B0BAF5C4B69044CB59F2BD74E08CB4D11E4CC5571D87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680844, "uuid": "f6fdf475-7bab-4ad6-9c4f-9da3011b53cc", "value": "12:z0FZd6Td7BTa0bmf0FZET/na0bmf0FZliTtRTa0bm2:w3G7la6rOa6r7ga6x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767680844, "uuid": "8e8edaa2-1dcd-43f6-8b1a-15c282a33f00", "value": 878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680844, "uuid": "ddfb5401-a37c-451a-a798-8726d7b73731", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b849ecf0-8d8d-11f0-975a-82aee05be84a", "comment": "Malware payload (XorDDoS)", "timestamp": 1767681681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681681, "uuid": "f8e8845e-ba79-4dcc-babf-36b4c6270c80", "comment": "Malware payload (XorDDoS)", "value": "c6e68651a8b8c66bcc4ec419aa4b7316", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681681, "uuid": "b7de109b-6854-49e1-98bd-27f9bee3ac77", "comment": "Malware payload (XorDDoS)", "value": "69f17c943d7b5f987095d3c288e2e6e5e3f940ae2ce4c35cec24cde07695e977", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681681, "uuid": "17046e96-c8f6-498e-bc45-6b727e946fb7", "value": "T164C45C56E383E2F7C82705B0134BF7BF4620B6359461CD86B7989D5AB9338F22A4D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681681, "uuid": "e1176c2c-3138-4cec-824b-dc0f383e4bcd", "value": "12288:4Ufrcn+vwK5ripVU4tdZ1pNL/pVbz666ySjQn36Eoj:/fUywKQ7Fb1pNL/p56fjQn36Eu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767681681, "uuid": "86e114a5-429e-4253-8059-dc04a21acaef", "value": 548616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681681, "uuid": "1a95862d-a5c0-4162-8d6c-5a9b17fbebb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e35588c7-eaca-11f0-8990-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1767681756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681756, "uuid": "5bac3ad1-8ae1-4b30-9f74-e32a39ec6b24", "comment": "Malware payload (GCleaner)", "value": "1641b748ddf4e0f2585ea39ba05fffc7", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681756, "uuid": "5f352e6d-8768-402f-92c5-edc9bd99335a", "comment": "Malware payload (GCleaner)", "value": "e12ee881dfc08be10518297a60a1c6cab1312dc44b8122a1119edb681b338874", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681756, "uuid": "3df22aee-22b3-420b-82e4-039bf6745d02", "value": "T15D36DF85EEE73039E3C63E345829A59D9F68AFC03F0885D2275714C7DBAED8314992", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681756, "uuid": "f8d6e7c8-6634-46d4-97f7-6de145eba204", "value": "47a71adfa27f235be83d38d946a32453", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681756, "uuid": "acba86a9-c951-4d50-bb0f-293b1d3e4e3a", "value": "98304:c60olpeHdelHV6izigjlmFYePWSNbC+k/9g5yVN:crolgHdmL5hM/JNbaukVN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767681756, "uuid": "032d76f4-bb0b-40d8-a5d5-6a6aa8003228", "value": 5057296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681756, "uuid": "fc757eb5-3aab-40c0-97e4-87d6e09788a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc24b4af-eacd-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767682979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767682979, "uuid": "f7dd7db9-20fd-44c4-b809-c55c83c19543", "comment": "Malware payload", "value": "f9c7c1b808f56d73b2652f879f5fe39d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767682979, "uuid": "230c0113-c439-42e0-81f4-a882892ea545", "comment": "Malware payload", "value": "366bf0f97ebe5798c90d9a98c9ea3f8ca83c7b80ecdd8d1fc892fb73f0138c04", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767682979, "uuid": "43994810-9e7f-42ff-a6b3-ed0cd6ac52a0", "value": "T177034B2B21AB20210523D05D77877BA931351167FB42CAE63DAC8071AFE7D92EB735", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767682979, "uuid": "cdece0e1-98b9-4b31-b6f9-0b3101d73a10", "value": "768:IDSlf60pY9JKkGWkkg1kVpA3EHkV7kV3kVr3pkVskVA2kVRkV4kVPkV9QmVGIEGS:uUf60pYbKkGWkkg1YpA3EHY7Y3YbpYsM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767682979, "uuid": "a6a0e304-2906-45d2-9026-34a3395767bb", "value": 40397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767682979, "uuid": "a973141a-edd9-4f5e-8d36-427ca4c71c00", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1deb273-eacf-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767683794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767683794, "uuid": "b0808a48-9edc-4547-9522-e2003fd799a2", "comment": "Malware payload", "value": "8a5f9ddc3543f9ab8be17103ccac758c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767683794, "uuid": "dce830b6-0d9d-4bfb-9c37-2f9960c20dbf", "comment": "Malware payload", "value": "a3c49845e0be944e76ec9ffee3a9ed474280270ca85821544923c40260c72c0a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767683794, "uuid": "414cc635-dbad-4b40-a7fc-6f9b38662231", "value": "T12324CD25A69E4E5B4F05F70AFB03CE00EA6C1259CF842E9A855D18A5F32F45A3CF16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767683794, "uuid": "c67f4804-258c-4cac-950b-de0a294ce14c", "value": "3072:9dh/qdvH064Y1Mq2nsroRS8FE+XurevyRIg83xL/jOdN9Dn85MmwjjnopiHxKMSZ:Udz1MqFe95o+ym3l/jOdr85zx/m9+N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767683794, "uuid": "0ec19b27-cae7-44f1-8ece-3df30437bc95", "value": 223311, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767683794, "uuid": "01b97dc0-18d0-4c18-aa76-1fbc963bab37", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7918b904-e87d-11f0-a6da-82aee05be84a", "comment": "Malware payload", "timestamp": 1767684681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767684681, "uuid": "c184aa6c-cafa-48d8-8a09-8c6b229e4850", "comment": "Malware payload", "value": "4bc77229bc0131b3759648a99c7d5cc7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767684681, "uuid": "db14ab86-1425-44b3-98d8-7d4a4f68e575", "comment": "Malware payload", "value": "4e5485992f13c749625e4703116336dbc2d4b1fb3500d7a8ab0908432532c12e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767684681, "uuid": "0e358107-48f7-4f4e-b56c-a010bdd230e3", "value": "T148E07DD6A0405006DB20560409A272199983F0051C8C98F8CA9970689CE8711C0933", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767684681, "uuid": "becfce33-64c1-4b23-a68b-7d5500e77e3c", "value": "6:qTIuJzhqIzqYki0XMRJVCNOODZIVQk/MmEdxUBDljQ6sWEfDZIjLS0p+Kq4Qb:qTpj0XMxCWjMm4xUXWTULSE+oQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767684681, "uuid": "5abd7354-d521-40f8-a431-8a89c32f66d6", "value": 317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767684681, "uuid": "2e66a4ea-ec19-4b80-b58c-67476d551ca3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bac76553-ead3-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767685554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767685554, "uuid": "0650ed05-57ea-48c2-a73e-faff39f8d60f", "comment": "Malware payload", "value": "b5ad375b52a35ef31e7fb719b3332de0", "object_relation": "md5", "Tag": [ { "name": "chrome.apk", "colour": "#595610", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "siberguvenlik", "colour": "#000b2f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767685554, "uuid": "5f884f46-2500-4bfa-8894-3bd2a718bb08", "comment": "Malware payload", "value": "f291694a337ba774fffb0d8dfc1e666e1ec5b7f70fb5e910be9c64320efcac9f", "object_relation": "sha256", "Tag": [ { "name": "chrome.apk", "colour": "#595610", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "siberguvenlik", "colour": "#000b2f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767685554, "uuid": "3d36c3e7-3de2-45f3-b388-d0694b89eba2", "value": "T11DB5E001BBA89E1EC877D1320C4A5236A01AED63CB13C387ED752B5928AF6F44F157", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767685554, "uuid": "2bd6e8c6-aca2-41f7-8b23-d5d7813f90f7", "value": "49152:fL4/oSgvJzp23Kw6LBRvi5wIm6gcWeq+o4ax57hAIjY:YoSqeF63vZqgHnd4a795k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767685554, "uuid": "b3431a98-0757-4b2d-92e7-af57a5d2ffc6", "value": 2441463, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767685554, "uuid": "2e0f9a01-261e-402c-acca-8973b55aa401", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3140f567-9af8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1767686226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767686226, "uuid": "61da1ce8-6ec3-4352-b28a-155bb1fc0c4c", "comment": "Malware payload (Formbook)", "value": "b7759166a0f1807b202b45f510c2172e", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gootkit", "colour": "#020754", "exportable": true, "hide_tag": false }, { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767686226, "uuid": "a09b10b6-de65-4f92-b72a-7864dc7bd124", "comment": "Malware payload (Formbook)", "value": "825eb1a627f34c3d1fad85cb5904b5ac0fded65f677c5a85fa992e42c450fd99", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gootkit", "colour": "#020754", "exportable": true, "hide_tag": false }, { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767686226, "uuid": "8d4c2bef-2d28-4090-822c-ff2b743d4010", "value": "T1C632C41E9268386F11EB5195F777B3EC503A4878C060028DB07F5929A257A93EA235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767686226, "uuid": "6e6aea84-95b0-4bd6-a04c-7c60794d9a6d", "value": "192:OO0vOM7R1YehNAKU3IEjHmaq44BG0wK5FhYg/4fT0Cmlz+S+CVy+g/S:OV6KU3IEq44BG0wK5FhYg/Q0Cmlz7+C7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767686226, "uuid": "351eb590-8693-498f-b573-0bd41854d7d2", "value": 11694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767686226, "uuid": "712496fb-46ba-4df4-a492-e80cee69f313", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77523479-e19f-11f0-9c99-82aee05be84a", "comment": "Malware payload", "timestamp": 1767688926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688926, "uuid": "bd6a0ae5-9984-484d-b65e-e8e6c6b7a54b", "comment": "Malware payload", "value": "ebbcfb749a959fb53e9fc8b6dc915838", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688926, "uuid": "85b67eee-6692-4356-88ef-e041e5cac68a", "comment": "Malware payload", "value": "3f4c3c16f63fb90d1fd64b031d8a9803035f3cb18332e198850896881fb42fe5", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688926, "uuid": "b11bb239-6a96-4b6a-9f64-3265805da096", "value": "T17D9501321243BD9FEBAB0FBCD28236980C393D572BD155D8B6CC469215D5AD8CEAD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688926, "uuid": "77061e6a-c514-45a4-9a3c-421d2fb969ce", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGC4yczQDBoi0Ft:8UixbItdTrJoFVPMvXGni0v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767688926, "uuid": "527b372d-17f8-472c-8d3d-ddb52b9332cd", "value": 1969672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688926, "uuid": "90b5d2f0-e31a-4ff5-9c43-4a30d08bf588", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9611f1d0-eadb-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767688928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688928, "uuid": "7a17e9d6-83f2-4317-b2c9-61dfccbbddc4", "comment": "Malware payload", "value": "65b228d1e14e8c44acc693cf6550d591", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688928, "uuid": "2e8a539e-673b-4d29-87a2-adbfa4f34d8b", "comment": "Malware payload", "value": "defc3171f096712efea017edbb12c7202760748c9e1b56405bc374ab0535f267", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688928, "uuid": "64c576fe-c088-4216-a56e-f0df900207d5", "value": "T14974F8FA1223AD8FCE2A0E40D04D0127DC78B87B71F49558FE40967058AA658DDF5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688928, "uuid": "8e28e43b-633d-4563-94da-bb9af7be3016", "value": "6144:ZPza6UAgcHFjLYmbnahN2l+YLjYj3igNOm2Rwe:kMxHtLYm2cF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767688928, "uuid": "cbe99127-77c1-4924-8d05-5fbf8db65483", "value": 363183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688928, "uuid": "7d518b7f-08a7-4ad9-9d2c-1fc82aa819f6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de5129c7-eadb-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767689049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689049, "uuid": "e8a891d0-0b3a-40d6-93a7-28504ac1376c", "comment": "Malware payload", "value": "9537fc5c2c545268e2fa7e9f867cd1d2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689049, "uuid": "96489141-52d7-46a1-97e0-7679d9441714", "comment": "Malware payload", "value": "41d305a8ce0d75c122f0a45dfa4510972576ca7c0f7dd964136f429180da9160", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689049, "uuid": "293df9c8-4c83-4818-bba6-68da3562d125", "value": "T112740AFA12236D8FCD260D00E00D0117EC74BC7B72E554E8FE4495B059AA658EDF5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689049, "uuid": "5aa352df-424f-4f69-a6fe-d618ce235f24", "value": "6144:duVNZ34ic7/BKOeZV7QzEtks4dGQexrxEs3bfVdtgxCj:MVN+E5trxrfV7F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767689049, "uuid": "467fc75a-2ea8-43ef-8012-b6cd88b83e4a", "value": 363867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689049, "uuid": "a16060e4-51a7-4376-acf3-411a35b04c08", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2490cf55-eadc-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767689167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689167, "uuid": "ac551022-97a9-4831-98e9-a7647b8ae4ef", "comment": "Malware payload", "value": "7d57fa0c125bca80f184dace3a93b453", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689167, "uuid": "bde35d20-c62a-45b7-9095-1a258384c233", "comment": "Malware payload", "value": "e9928411dabbd0b2b6e7f51da611c35a5f85574d915e07f4e8ae4b126147d9ad", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689167, "uuid": "bda7fbdf-41ea-4a0c-ae1a-f5061d9c6067", "value": "T102235CF20723AD8F8B2B0E15F40C2211ECB8A89771D994BDFF4906994AE851CDC74E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689167, "uuid": "500e7fe7-7ca9-4351-b0f6-fdf5127d6eed", "value": "1536:uasXPqr2w9XGRMBY7R5Yo01/tBEBmDGxV8S6wMZCB+VB:FsM3JqMBYgo055MXB+VB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767689167, "uuid": "ca01f564-888c-43b8-9403-0cfef9e6ae3c", "value": 49155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689167, "uuid": "421f6998-051b-4b42-86e0-c5823ec2fe1b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "479833ab-eadc-11f0-8990-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1767689226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689226, "uuid": "8381da03-e0f9-4ed9-90c4-dab9a4a3dd58", "comment": "Malware payload (Phorpiex)", "value": "ae4c19c67aa7944d5fde3b473ec4ea94", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689226, "uuid": "a14727c6-8418-49af-889f-8ee07d8d3e18", "comment": "Malware payload (Phorpiex)", "value": "f6b776c042d7e9843662816150733c7b0fd7f1dfc1938467c3866f775f7ac5dd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689226, "uuid": "91d38007-8c40-4f5a-a26e-dbea1429c5a1", "value": "T129323A0BAC948112E3E04CB019B1928F8ABC69732B5662DFF3B3D64B5B7075184207", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689226, "uuid": "4d2cd9fc-4fc7-48ff-85b3-224ecda7c68f", "value": "d619fbf0a108fb3ff7113afe795582e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689226, "uuid": "3d678789-bb69-4fe6-be07-1db41f196d36", "value": "192:maGsGa8/0wnrcgOPpAhgWxEJJlMLkWScZqGaiPC:+sGa8/0wTOP+hj+JMQWSc74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767689226, "uuid": "4d3de2f9-a94c-47ec-92f5-61e1afd33314", "value": 11264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689226, "uuid": "b4b73544-8264-4163-b859-7462cbc907d5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a94c52be-eae4-11f0-8990-82aee05be84a", "comment": "Malware payload (ShikataGaNai)", "timestamp": 1767692826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692826, "uuid": "7e08e2a1-a59e-42fd-b0d9-48a1014ae0d2", "comment": "Malware payload (ShikataGaNai)", "value": "00c8149f10d0b1f0ae1aa1d2e4c467dd", "object_relation": "md5", "Tag": [ { "name": "cobalstrike", "colour": "#ce6bf2", "exportable": true, "hide_tag": false }, { "name": "ShikataGaNai", "colour": "#bb0de0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692826, "uuid": "6d9eb1bf-2494-44af-b015-461df6002b4a", "comment": "Malware payload (ShikataGaNai)", "value": "b54be7d5819641f701b28d196ad4d315fa3e7b6eb03f921d44764c79fc1f3ca3", "object_relation": "sha256", "Tag": [ { "name": "cobalstrike", "colour": "#ce6bf2", "exportable": true, "hide_tag": false }, { "name": "ShikataGaNai", "colour": "#bb0de0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692826, "uuid": "5c0e02c5-7a68-4d03-9905-cb8635f07fd1", "value": "T16573B042E5C45132D1A3127D16B53AFA5AB1F1BA3710C2AE798CCDE5EBD18B053393", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692826, "uuid": "6c06e057-5624-4631-a090-6ed62db12fbd", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692826, "uuid": "618f0a4c-ce70-42a5-ba5a-42bf36aec9ba", "value": "1536:IKCffViaEKwocOItFBeYilJy716Ga+AHBWEYSMb+KR0Nc8QsJq39:GFiewo78DID6ZSe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767692826, "uuid": "8c89f6c8-8d1a-4874-9119-3cc75190f0d4", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692826, "uuid": "adffaece-a2d4-454f-aceb-76e3421b622b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5327028a-e9e3-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1767696190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696190, "uuid": "29e20762-afb6-4fdc-b287-a7de97428cad", "comment": "Malware payload", "value": "6a16e166948ddb9e6e9f9de503e21c60", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696190, "uuid": "692583a3-2d91-4e4d-a3c9-c46963f3c60d", "comment": "Malware payload", "value": "e40c4ba7c5a6122be47636a59952f82aee24c8c3825a6e4449bb04d0e2ced0eb", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767696190, "uuid": "e1a606ea-1d35-4b7d-a212-0f82677aac08", "value": "ECD3128BEF36DC1FCF001EB22ADA5B9E9C6D756B41CBF4A4B9C1818F13A01C97952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767696190, "uuid": "e8d998e2-3c93-47bb-a94d-1eb19c6970c9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioI:p3lOYoaja8xzx/0wsxzSiR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767696190, "uuid": "836e9ccd-cae7-4687-ad2a-ae046d5981b5", "value": 135660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767696190, "uuid": "9a709188-0bee-44c9-a6c5-c2976a196d4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b11ebe4-eafa-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702036, "uuid": "a1143a28-dd38-4fbf-ad3d-f8d893aa2eb4", "comment": "Malware payload (Mirai)", "value": "144f43f07829e7f9efc583d8b0d6e039", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702036, "uuid": "a1000579-1be3-44ec-86b2-33134ecf3944", "comment": "Malware payload (Mirai)", "value": "413b6ea96fcb76d4a00f67b35d63d0823b36fdf18fc18a8a8c5aadb2c357a08f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702036, "uuid": "189a8ffa-d7e2-4814-a368-cd286e13800c", "value": "T118434A0073588D43F4AA1EF6283F17D483BFFE4112E5E0456E0EAA4A8236E735956F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702036, "uuid": "a3f03267-49a9-49ae-9877-bbf611b17638", "value": "768:8Z7mYHm6RK0+PFaXgqkM+3xiWXRdIw33H5JTFYrPZV8rF6GHR1b03Ey20o:evHm6R+ANDRWhKwHZdFUdGHR1bGlK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702036, "uuid": "0f9ee3b9-019b-4a5a-b3b0-640a783d8f28", "value": 58960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702036, "uuid": "050e34b7-bdad-4f65-bfa5-3a4bfceca76f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5603406-eafa-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767702322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702322, "uuid": "9128bee4-a149-4f0b-b1b2-8f9f2507c0b2", "comment": "Malware payload", "value": "ec23f71a6317355d2448c2e79b45c547", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702322, "uuid": "661f39e5-8f02-486f-8e32-3fc4eba0ad00", "comment": "Malware payload", "value": "ae34463251959957ace1a971472392cc5e99ef6c733bf1837aac5dfd322b88d3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702322, "uuid": "75777f8b-db7b-46c2-a51e-9a95ba5d3753", "value": "T1CEC1544A92C20B43D0431950615EBB296A364ACFDF8386552DEE177BCF4F96D23A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702322, "uuid": "c8f7dde9-d904-4743-81ac-851fc47fd078", "value": "96:3O5qhJKfqu5zOJvBeRQ+GrE+8mBeRQ+GrE+LUJvBeRQ+GrE+gPJvBeRQ+GrE+Wyc:GqfKfrSZeVwJeVwUZeVwgxZeVwpZeVw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702322, "uuid": "e1985211-35d0-458b-b3fe-4ffddb2f8834", "value": 5971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702322, "uuid": "8d5695d8-8b08-444d-8f10-6f8397d34747", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e623919-eafb-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702525, "uuid": "ce021217-922e-4d7f-8198-c7441a13f287", "comment": "Malware payload (Mirai)", "value": "9732f398a7c363426b3aee596e5c31aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702525, "uuid": "07b2b327-e81c-4757-bf95-6e700cb96cf4", "comment": "Malware payload (Mirai)", "value": "f110c9722cc512ebcf524288b5008e842464ff61fa93350d7614e694e3686454", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702525, "uuid": "4e954064-e16e-4422-8d59-62fabbafe4cf", "value": "T1DB437C20C6BC5DA4C4408EB1B668DA745743A805A6F7BFF5CA40CB68800BEEDF5497", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702525, "uuid": "58f126b1-95d1-4051-80a7-9d3760fc7398", "value": "1536:waD/DsjwrZ1kAmJeW/ZusCHkrEbHXCPF:wmIjSIeWIHGEbHXs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702525, "uuid": "abddb110-8ab1-49e6-a8dc-7b4267adc5ec", "value": 58368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702525, "uuid": "6b6e9877-6990-49da-a22a-b853a5413344", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43bf44e0-eafb-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702534, "uuid": "a6fbd8a4-48cd-4878-9802-204e8c4d6fa9", "comment": "Malware payload (Mirai)", "value": "ec287864f3989a2ffc43264b73740984", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702534, "uuid": "5720ab57-78fa-47a3-994b-072901a31910", "comment": "Malware payload (Mirai)", "value": "53248a1af7b93af8cc9f13867fef08e6f16712837f9ca5e2aeac8f24fbfe9bc5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702534, "uuid": "769ba4d6-5231-455e-96ef-aaf75c6799b4", "value": "T1A35317C6BC40EA25C7C00677FE5F109E3715A7C8E1EA32029D296FA47A8FD1B0D5A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702534, "uuid": "749a22e5-8861-4916-ac15-5b08a907ac90", "value": "768:NFfIafP4LTH7zml/6jrA7u0hkermbANacd8UYyCQZydRU6SE4N0L3rOCd0RSBneb:f/34Lvi5mr3fU2/bhBpW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702534, "uuid": "160f74a6-72c7-42cd-af2b-1fd957175ed4", "value": 62468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702534, "uuid": "e6ea27a8-5da2-408c-a986-f921518c3a8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f185035a-eafb-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702825, "uuid": "766a3f1f-34fc-4f36-b0bb-6d10ca51d9e6", "comment": "Malware payload (Mirai)", "value": "d515bf342d07caba906ff33cf209c954", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702825, "uuid": "8d22738b-e5da-4e72-bb2e-bb4a1d583088", "comment": "Malware payload (Mirai)", "value": "fa9cc515a7c82e8d4c0508138cce62a676d18d73ebb0779b0032f7d5471563e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702825, "uuid": "73842a72-df79-4d0f-a421-6c8c9264bb8b", "value": "T195534A8BD6C7F9F0DD42057C20ABAA35D436A8223174CFE7F7D9B513E966602A0123", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702825, "uuid": "6f8781da-c0e5-45de-af33-821774d6d67d", "value": "768:0HM+HZ7PporS5eFRMzFpQRPagnmaWqby2iLZ06jR3vrNpHFfhsIGExSmVDVexBuv:0HM+HlxqSE9N+/JR/rNpJGgxSHqjduQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702825, "uuid": "caa41520-322c-4f87-963f-c46ca5c3829c", "value": 62048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702825, "uuid": "b20f8a08-444b-4a5b-b931-e5f2c1fbb82a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "157cc522-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702886, "uuid": "284a840a-bf37-4dfa-a4c9-c7246730e123", "comment": "Malware payload (Mirai)", "value": "5c5fa6c3deabfa10b722462edeeacb3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702886, "uuid": "c46ab1e3-b437-4060-bb4f-afb529892fba", "comment": "Malware payload (Mirai)", "value": "1d96abe06be1940c50930bb530be924a592da835b4de35a72c16a55b3f5a5b9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702886, "uuid": "1b32c7ed-5092-4ff9-8ebc-01dbc615c6a0", "value": "T129D31B46FA409E13C0C61772FAAF414A3323D795E3EB33029D285BF43F86AA94E576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702886, "uuid": "01ccfe11-ea58-4d6d-a13e-69550f954a9e", "value": "3072:WBAL1Xg3Td+21MyxBpuxAxKpEcYotAygkl4FHUIIM/9DAX6r:nL14rwAxKpEBouyjWFHUrM/9Dy6r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702886, "uuid": "300f3446-b08c-49b1-a543-9348933f1306", "value": 135750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702886, "uuid": "2947b5c8-a750-407e-8bdb-57e22f60b386", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45ac1965-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702967, "uuid": "d584502d-e464-4a81-9643-f45adc69f949", "comment": "Malware payload (Mirai)", "value": "196d789c76a8863a9c366894523fb5dc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702967, "uuid": "3150e168-5c4b-43e4-b2f6-db5c18fdd92b", "comment": "Malware payload (Mirai)", "value": "72aeae614832e86a2cee09e1077aefeb064a28c48c44f3acdeea9da94050b5be", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702967, "uuid": "dd627643-c7c5-4460-a5d4-f5aa2bdfeb4c", "value": "T10E01F989213634F37AE6D8DB4B332C1830E7546F3DA66CB87D65F8C612A5C01F0A20", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702967, "uuid": "d1f162c8-4bfc-43ad-8902-5ca3436e2016", "value": "24:ZDkH/FbxHFPHFuHFWCFX/FM5gFfKCF1/FMDgFfWeD:hOFbx9sDPPRW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702967, "uuid": "b6c3d384-dab4-487c-ae1a-746df45cf991", "value": 771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702967, "uuid": "79fa839b-af0c-46db-bfbc-e866c4a26604", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49b77748-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767702973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702973, "uuid": "a91129f6-a776-4010-8c95-badba2abbf23", "comment": "Malware payload (Mirai)", "value": "49987042c72bf315f9ada806f1e5f254", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702973, "uuid": "96ba8d5f-e009-41eb-8ffb-82f872e2cca1", "comment": "Malware payload (Mirai)", "value": "2670615d0049e7d4b6a5ffab94bc382d94e70b23940799a6eaf664e9519f3c8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702973, "uuid": "0b3276f3-a50e-4a16-a2e4-2985fee3523b", "value": "T1BF33F8C6BC41EA2DD7C00A77EE5F10AE3340E7CCD1DA32429D2887A47A8ED4A5D56B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702973, "uuid": "4e115c9b-8fbd-43c6-8a3a-1686773a1b2f", "value": "768:o4TDnMqvgrxBFlz0gLxxHzkQZo69ivA7u0hkermbANacd8UYyCQZydRU6SE4N0LW:pDME4Fl/Lv9fMv3fU2/qz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702973, "uuid": "56ab7331-3b27-47fc-b23c-0dc0dd724845", "value": 54508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702973, "uuid": "9825b66b-04a5-4ede-ab76-eb646505b298", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5145eb34-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767702986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702986, "uuid": "84ffb437-af6f-4cf6-a663-ed0d783e7f69", "comment": "Malware payload", "value": "ec8142e2c03ffb044a6fce8e8c0d22af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702986, "uuid": "082deae3-f77f-4694-891f-908612ab1da3", "comment": "Malware payload", "value": "22a02748cbac4d261a2ceabdd0fa0234728601b3480ad360a9824a96b86c43b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702986, "uuid": "71774699-0fca-47dc-807d-db3e28baa7d4", "value": "T15501904A94E063B73D42745F80407CCA85E2C1FC81F18DB43C4FA487CA49EB4D5175", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702986, "uuid": "6c4e015c-692e-4b19-b7dd-78842ecf74e2", "value": "12:BMQkuxRsTdO0sszLxXGMMLZQlLeLft9WRHeE9xXGEztnkbcLz6RVZEpHeADqH8+:Wlux+49snxXGMWZyoft9el9xXGEzBRLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767702986, "uuid": "aec33cc4-c5ee-4108-89d3-b3d297f6bac7", "value": 747, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702986, "uuid": "354de491-8774-4f69-bbcb-c2bbdbe8a446", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13f2f4e2-9636-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703091, "uuid": "64e148c1-c06e-4708-a7cf-ca15e9f37638", "comment": "Malware payload (Mirai)", "value": "5a137348c521ae956b0981e40367896c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703091, "uuid": "7aa39c56-c38a-4d97-a187-031b15536308", "comment": "Malware payload (Mirai)", "value": "61d7073593cab5fa679a8f232057534fb9950d7342e5fd9f1ae2bc66e02b33a4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703091, "uuid": "b4597a5c-8bf3-47a8-9d1f-e7f26750dcc9", "value": "T15F933956FD818662C6C116BAFB6E028D372653A9E2EE3303EC255F2137C791B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703091, "uuid": "f3ccae31-cd09-4a29-baeb-886fefe19f2c", "value": "1536:kaOkn82KwbYAtoO7xGVaJa44BxN/SAN9TwxJSCJonP9eJCQsP2j+ks:kaPn82Kwb/7KHxN/RtkSC6CCQs3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703091, "uuid": "84383f83-52c9-4b72-aae6-d7bc5deab38c", "value": 89716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703091, "uuid": "7a895695-8145-4f3f-b65a-1d2f927dffbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffe2261b-962b-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703091, "uuid": "3ea162d8-1bb1-46f9-ba48-b3d9f290c499", "comment": "Malware payload (Mirai)", "value": "2ce47cbb88b90a55ccbf238289eb5e1f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703091, "uuid": "7908b32e-1a3a-4601-97ea-c13cc87854e2", "comment": "Malware payload (Mirai)", "value": "fdc864a8a3fac746362f853859ddc92efd7d9bf1234059e46e53e7f540b3d2c4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703091, "uuid": "8d8db38a-ac9d-4c5b-9307-04b3183a702e", "value": "T1D7432C92F89245AAC6D117B6771B978A33A36369C2CF7313DC080B5076C9A4F4E67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703091, "uuid": "7744dfc4-51c9-42e9-965f-2c14abeff551", "value": "768:j2uoWsASbWd2SNjrso8dWmR7DdZVOur9QKh54u8OMb2FX0npzJk6:jABAS82EsP0ADXcur9QKh1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703091, "uuid": "de5f56ef-1a3d-465d-bb20-139bad953046", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703091, "uuid": "18b1898b-d5a0-475d-9e62-80c112255002", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71aa899a-962e-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "25be1053-7303-4cf2-b48e-a2f98dcf6ebb", "comment": "Malware payload (Mirai)", "value": "7888785bf2b3c68ba47e3c86ee2e581e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "5db199cb-7d2b-472f-87fd-7db7e8ceebae", "comment": "Malware payload (Mirai)", "value": "a56de6035d2627d3d69e296dd06a3e20bc20ac4cbb55cb1fb040ca002539eae8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "3ad96752-c1f2-4b1f-9ef2-882227dbbf43", "value": "T1928329C1BA4BC0F5D91748304067F33FCB32E6398065D25EEFAA9E65DE2364256263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "daa108f7-acf3-419d-bd9e-dcb984739c8c", "value": "1536:+y4qVY59GwhSL9vrRgZXWAcanWiaSyzRigopFXKShkRL:+yfVW9G3L9v1uXWnplzRidpVAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703092, "uuid": "98f556c3-25e3-49e1-a146-2e76b135ae15", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "241c23ec-b8ab-4849-8e22-04f489467e4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56e667f8-9634-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "e96bf603-5e58-44c6-bae6-18edf3352479", "comment": "Malware payload (Mirai)", "value": "7ba9a1f023b309b055868c6b08d0ce84", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "082fc2af-8b28-480a-8ebf-7b40576099a0", "comment": "Malware payload (Mirai)", "value": "22ee9306a773fea4515508caa04473d7147cdada41a5f55c1bc5e4c9dc842227", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "d866bc70-c6c4-4d17-b2c4-b8053140b511", "value": "T199936C42B70C0A43E0571DF02A3F57E2C3AA66E121F8FA89790EDE4596B2D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "c5143b54-cb55-4bf7-80b8-896940ba4a7d", "value": "1536:Qz6hLjkN3iuK6mJYRBNS3LJRr0VN7OQqTzp8asfFzmge2MP0l1WrSlfPp+tID:bLjbE4TzGame2MCWr+ND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703092, "uuid": "018befea-e64f-4a91-a72a-0770185bc429", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "65d7bc2d-b300-48c7-b74b-836e1964fdac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04d75dd8-9633-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "8aa44370-4d1d-4dcc-8144-fa0fd69dbf7a", "comment": "Malware payload (Mirai)", "value": "4bd0216cc4f5a92a85406b90e0a90841", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "1f3fe094-5c5f-48f4-93f7-3c4c9bbdc6a9", "comment": "Malware payload (Mirai)", "value": "36138be064c2ad56445d84f82d31a5bedac0f6301e0231be49ebeda59cbdc9d9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "26c7f85b-3af3-419a-bec4-8e43423db5fa", "value": "T176837DC6E743C0F4E8528973217BE7325A73E53D1029EE83D769A932ED12502D66A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "06418228-c732-43d7-985e-c9c84c939f69", "value": "1536:61rUKNqeFc9yihp9Clz0VVk/13HWCsBjJe7s4TtABV:69UsIyyp9Clz04/13HlsBdarE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703092, "uuid": "c6e35598-0abc-42fc-aa76-45e9463941f0", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "87df676c-c7ed-46fb-ab81-a9e9d00d0b07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "520aafa8-962e-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "350391a9-dcc0-48db-a09b-8f02d4c00e26", "comment": "Malware payload (Mirai)", "value": "d196c1beb210d1de6a24e16c0429720c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "ef3c9e5b-9943-45df-bfe6-2446ab9e4474", "comment": "Malware payload (Mirai)", "value": "d315580b4383b94fd5d2a8aefe186d2b9380cf29081796e7ed82b403f6854bb0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "2c548cee-8e62-4279-b061-dea32f2dc08c", "value": "T130C3F909EB614FFBE86FCD3746E90B0525CC551722A83B7A3574D828F64B64B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "173d6d27-b7b0-400d-95b7-808fbe3a4983", "value": "1536:WNyKMWFSd1BVf+g6z3jL3JsYRX5sLuYk+ot2Le8hUK3ZanZJeG7r637oFW7MnS0P:8yKMWFI16TXQKK3UniG/L6rLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703092, "uuid": "ad3cb76f-3636-42bd-bdc9-09c7c27bd814", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "ede19470-1413-4942-bb47-2f400243693a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fc7f8d4-9629-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "92c74916-3dd3-417c-aa7f-bfbe6c81bf26", "comment": "Malware payload (Mirai)", "value": "ec7148c3617e34c8a679adb626c7ae74", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "34b2baa5-499f-46ba-9efc-3047df226ef0", "comment": "Malware payload (Mirai)", "value": "7023374287293202bd9794076550553181695ad19f51a5a8b242ec334644b84d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "cca0ab24-840f-485a-b6a4-a5e1cb178530", "value": "T1CBC3C74E6F218F7DF368873047B38B25A75933D626E1D685E2ACD6005F6034E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "ab262a45-c27a-4f5e-a2d7-c1edd4b2d9ca", "value": "1536:n8hVKLkQRae4eyJjkKFZITjPCLku7wpa5wU9a7w+8OyOADea2uPNKpslG:IVKLfRav5kOM+H9a7wyyOATN70", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703092, "uuid": "ad1f5461-2ec4-44a0-9448-3f17d9ec1601", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "3febf80d-7357-45ef-af64-31b96444e26f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0458b739-9637-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "11bd8864-2df8-45c7-9ad5-9a2de2288ff2", "comment": "Malware payload (Mirai)", "value": "a2d356a4141b400e703a1b61dd470fe0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "e0072a85-479a-40db-83c6-40968007d55d", "comment": "Malware payload (Mirai)", "value": "58a4441b65d6f3a28eb64dbabdfe667e0e6f3101f6efb855b5f488002929dc82", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "bac5ace7-0060-4e04-8168-10fb9fadd50a", "value": "T13CC39DC3FA8714A1C46206F107C71BAE2F93A122CF5FD4E7AC1DA63B5A7A0DA15167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "90f4a5d1-9434-4035-9733-b9ce85499ff1", "value": "1536:sYBY7LnKtx0AdeHjV7uXwHlWuoPpsiUckl9kyVcMxs5RpgRCEy/LWZ:PB0nk0qXwFn+jUck4yVclg8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703092, "uuid": "649a10d8-6af8-4baa-87ca-0fc2624fac57", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703092, "uuid": "2935719f-8e83-4e24-803b-8fabe119519d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67199fdf-9635-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "f957d11a-bf3d-4cb5-afc3-bc83093a578a", "comment": "Malware payload (Mirai)", "value": "1ca6d84c8dad6bfc92a1a5e46368e44e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "62b260fb-dcf9-4cb6-8685-e254dd3f7a4f", "comment": "Malware payload (Mirai)", "value": "56f04b6a7987032d21da319edbb0f2abe30f83c3e67baf3e8e4c17f41c45a6be", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "cccf5a45-9acd-457e-866f-06f20f0598e3", "value": "T180937D85FB43E0F0D90609B011ABF7798A31DD362024DD6BEB98FD76BD326129116B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "986a3374-260e-4b3b-b359-4dad07898686", "value": "1536:kJL99zpFfctRyXYDRDDCcz77J9Q4z8GGIYqoBcQaU331QUHLaEiKixr:kprWtRyodDDCcz77J9Q4I3xuiG1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703095, "uuid": "1e3e188c-ecc6-4603-9514-8dcb5392b1c8", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "fdef564e-c251-4a78-baf6-663fab00a89d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05355655-9633-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "1b06684a-91b4-463b-beb5-d9a38eb328ef", "comment": "Malware payload (Mirai)", "value": "7f7f8f4aff1bcdcdd4291c4c99a9d72a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "08fdc79c-0c2c-4f2d-b1f8-b579e3d1b094", "comment": "Malware payload (Mirai)", "value": "bc5e6c53ac612a1fd7e24426dcb58ceb32a849ffac7ac0cb2939c765ed72ada1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "491154a6-edd6-46bb-958d-8c31ba96c435", "value": "T151936C02B70C0E43D1675DF02A3F27D1D3EEA6E121F4F688691E9A8591B2E371586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "d707b2c5-9155-4be6-b68f-f62afb6c31bd", "value": "1536:WylR4eY8zrTgbrOMoV4SKUgZ5VvHfNaEY0ZM1ykpAzKY3uVetMuXyCQ7sIER3BfG:W2RvfzrTTMoqkDTAzhRMVC0UG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703095, "uuid": "4fa53047-f8be-4322-b093-77d25a97b08e", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "6f4b89e1-c01f-4e07-a701-4b4c99987499", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa448422-962d-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "ae767f2d-e798-4d50-a514-cad6c5737b47", "comment": "Malware payload (Mirai)", "value": "e25c8d2777a17119a613f9b1c8505de6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "6433c526-9f27-4eda-b7a2-e7792f8a26e0", "comment": "Malware payload (Mirai)", "value": "a66c3f077a1a05e39fa30428349b465d8adb012fa42c683a8a01deebcc620f22", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "95ea8e1e-d193-4d90-848e-b54b159b5722", "value": "T1F4933A91FD818622C6C116B7FB2E428E376613A8E2EE7203DD155F2137CB91B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "01a65e09-560a-4f9d-b483-4ce9ee062c02", "value": "1536:hUjV9i5MbkkmBLnyl0+MixFbP194EBqNmvYEaLAr1ocMtbv6aIA:huO5MbkkAnixFRGEQNmvdpeB6A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703095, "uuid": "3699f6dc-b6b5-45af-a5f2-0606135ea757", "value": 93228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "18e7a11d-4113-490c-8c61-87aa6e8f984c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83e7efbb-9633-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "9ccbe4d7-07ac-4c4a-9a7d-c2fd1e666dc8", "comment": "Malware payload (Mirai)", "value": "63000aa54261e97ad24f685d19cee525", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "9420c7b4-e968-4077-90e2-2bae849c9060", "comment": "Malware payload (Mirai)", "value": "352800a63dc4ff68272c041ea4c6026ff8c01f2b1591d118a9d54c91213e2fed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "302107f5-2b2c-41dc-ba2a-761dc3457e39", "value": "T104A349D7B401DDBDF84ADB7B40531906B131E3A20A831F36626BB967ED361981937F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "76654a16-c995-47bf-885d-ca28e6540d0e", "value": "1536:hLpDMXniS9kSn5O5wgtVfd4zsvcCkrr7o8zWA8T3OH6iC2J3m8Ry6KG7QIeW4N0+:PLSnQwgtVluRH7o8zWIP3mOyZe4N0X5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703095, "uuid": "9d2d93dd-539a-415d-ad98-6e3148a90612", "value": 99704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "1738d937-3803-4601-878e-8f823d0ab1d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "190dd773-9632-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "0583fd44-38c8-4771-a209-b924cf643039", "comment": "Malware payload (Mirai)", "value": "de00dcf3215d1a016a99fd5724bdcc62", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "2857bc0e-56c2-44ee-9b6c-dac1a1c13d7f", "comment": "Malware payload (Mirai)", "value": "bb3e1db2ee359592567e2506d5a2eb0ae87ce29b1d9dad08f610b53827c84ad6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "1b68ae6d-b7f5-43b7-87c9-7747ef660d73", "value": "T1AC432C92F89245AAC6D117BA771B978A33A26369C2CF7313DC080B5076C964F4E67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "7953dc32-f6da-41ca-a404-4a44833c8342", "value": "768:yuoWsASbWdWSNjrso8dWmR7DdZVOurdQKh54u8OMb2FX0npzJkr:MBAS8WEsP0ADXcurdQKh1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703095, "uuid": "7c7c4c02-f00e-49e4-b0ae-be49795dcded", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703095, "uuid": "ddb4ad76-98c8-4e72-9b8c-d05ea7ee3ce9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada5d416-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703141, "uuid": "b724d6a1-b467-42c5-997c-fa12a4929db7", "comment": "Malware payload (Mirai)", "value": "75516c84b1dd5fc4536fb049bd636605", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703141, "uuid": "a5eec989-88e0-4177-a663-4e52396c35cb", "comment": "Malware payload (Mirai)", "value": "773fcfca925a9d6b311fc3f8d6f817b293ab7fce9b4371e9f18020f69be1a45c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703141, "uuid": "3d0f753c-51e8-42a3-aa56-88190a0cb863", "value": "T195434B782405F2ECF5A84178F4075DE52E2206253EEDE1E3B4435136BE76F88B86DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703141, "uuid": "8cb05d31-9f02-44be-bba7-089f5b01d1c3", "value": "1536:Lznro6bN0xPbiySVBIVCCfy0K9AVHD5y:LP7G5bMurVj5y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703141, "uuid": "84ac4bef-c922-4a92-8e1f-e4381919abc7", "value": 58756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703141, "uuid": "37f92a42-df31-4b30-8d2b-899b0580e76a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5135971a-9632-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703157, "uuid": "0b633376-4c56-471e-ad1c-73c4d83c7734", "comment": "Malware payload (Mirai)", "value": "8b793465b1cf81646aa39c5862df456f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703157, "uuid": "3f4baf61-f545-45eb-8e02-ce779ab03caf", "comment": "Malware payload (Mirai)", "value": "a9fe58e41551822b2ea37037f633edaa735b23a8d140516d0b7fb1f6a22b7cbd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703157, "uuid": "08d9b794-de2f-46ca-a00f-b54391036842", "value": "T14A935A53B9C480FCC849C13057AFB276D923F17E1279B15B67C4EA167E8DE112E6EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703157, "uuid": "e575a795-50a3-48b5-8e0d-aec6822c44af", "value": "1536:MGlP3ojiRY/6+T1UdQNjIB87yaAQ01B1ks/Vyec5fwlLJH27ySHA:MtjiSLT1UdGjIAyaq1B1ks/VW5fGLoLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703157, "uuid": "93bda3b1-2758-4b17-b891-a6e28a170a52", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703157, "uuid": "f75dc5d7-f9e4-40c8-93a9-a278584b9e85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8a7444-9634-11f0-91a8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703209, "uuid": "9d1d1ab9-5d16-414b-8bba-97aeb015cb9a", "comment": "Malware payload (Mirai)", "value": "1f536a391169c442b020fed1eb807710", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703209, "uuid": "731057cd-f86b-4ece-b7ca-ecd19780b62a", "comment": "Malware payload (Mirai)", "value": "bec7e174837eee065ca34161a4ad9f4a0cf3f2793a4c1dfa5658453f88130326", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703209, "uuid": "526c61fb-f08a-41d1-9e71-8631d9349e7e", "value": "T1E483AD33C93A0E68D84885B4B0B18F765763E51581A72EF7495AC63AD083EDCF58A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703209, "uuid": "7991063e-a06b-48f9-b975-dc71a70006f7", "value": "1536:v6y1xh8uVMZxM49efRQKRPLSkC+RCaR9HnHyW:v31xGZvcR3RXC+Rvdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703209, "uuid": "7719247a-f43d-4b73-8c79-e0363920d4d6", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703209, "uuid": "d1fb2cab-eded-4b09-ab9c-74eba32be50f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa6d548d-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703270, "uuid": "c6cacc1c-1b58-415e-831f-b8e2f52305e2", "comment": "Malware payload (Mirai)", "value": "7b22a43f35c6eb0e84f4f63d4e219ec8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703270, "uuid": "0a7211ca-4e9b-40c0-8aa4-619dd49a55e3", "comment": "Malware payload (Mirai)", "value": "de273633b8daf4b2a1d744be34b12a8405b588c167c161475d98a14d4f271eae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703270, "uuid": "dc9f4b12-975e-47e8-9f58-bfb947136e21", "value": "T13373F9C6B840AE11C5C61677FE1F114E33075798E2EE73628E145BA0778FC6B0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703270, "uuid": "ec482f47-7a37-4a63-95e3-f3764a2c532a", "value": "1536:iFnc3TrBVJamy5NEld+U31MJz/qOEHe2m//6BNzdI8ibVDO1C/:jfBVJrIgd+21MJenejZVDO1C/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703270, "uuid": "7ad3d7bd-f94a-4586-897a-b5cbb5ae29c2", "value": 75064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703270, "uuid": "48c55b4b-ed9f-442a-b6c2-aed96570622d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15f01f7f-eafd-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703316, "uuid": "c51bdabd-5782-4eb1-a4b7-5c782e6c93da", "comment": "Malware payload (Mirai)", "value": "859d38df71a0093948be5f3ec2cd373e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703316, "uuid": "bb35d3c2-8fcc-4c95-b1ea-ec2d380e2d87", "comment": "Malware payload (Mirai)", "value": "92e12de4431cdc0ee9398118f9b7d9e21202f1c34756900e39411094facb3c44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703316, "uuid": "04f418f3-41d7-48c7-9f4b-ae50fc13b047", "value": "T1A6433BC8E8C3B9F6FC00157C307A9B729977E63F6179DE97D7E895239902202A5013", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703316, "uuid": "58559d4b-7cf0-43bf-814c-fe6a35628bec", "value": "1536:gSW9y+LfCrlADLYuHwPdP+arvnoCF/iy9ns:gFyQfCrlAnbHK+CoS6Gns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703316, "uuid": "7dc2c85f-3b0b-4ffe-9dbe-6557f858022d", "value": 58160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703316, "uuid": "455267b0-228d-4ecd-819e-c02d9e98dde1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a31db92-eafe-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767703860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703860, "uuid": "fd7f60f1-2bda-455b-bc64-75aabc8fef1b", "comment": "Malware payload (Mirai)", "value": "ee23577d8b4765cf3674956426a97bfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703860, "uuid": "c235752f-82e0-48af-876f-bbd6be6cde00", "comment": "Malware payload (Mirai)", "value": "32f4bc34bb4a32437a3951f30178c617e45221b3964dc5a69131e90ce23e00f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703860, "uuid": "7919bb8b-8b23-4f73-a6ca-9a86470f9969", "value": "T1F5633814BD691E27C0D8923E52F7C626F2EA730E1070826D7D391F8EBB44790E9863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703860, "uuid": "15f1d29d-d26f-4348-8842-a0894421b5ae", "value": "1536:RLbc9u4XICR4VU5EsuCccl7KGql/UtWJMj:RHURR4VU2CcclKVbJMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767703860, "uuid": "7542857d-a5d2-4f3f-a70e-4f75ed9822c1", "value": 66888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767703860, "uuid": "6bff8c0a-24c7-41d9-bec8-88ecdacf6024", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b9070a7-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767704829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704829, "uuid": "e134a189-7a6c-4ef6-a5a0-89bccb0c2b69", "comment": "Malware payload", "value": "189429f3f34903a3dfcc3086acdf0449", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704829, "uuid": "ba9b545f-9f81-4ce5-8492-53719300705b", "comment": "Malware payload", "value": "13154d24602fd24a871619e1c6d2f7d1528c2bfe4bef90db477a7f9d61c68c36", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704829, "uuid": "c7683ca8-a409-483f-9b39-2d3c09a90d4b", "value": "T16F658C06FBA4AE0EC4F3D3320D795236501AD926C743D387D92837B9249FAF44E856", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704829, "uuid": "b512112a-d66b-4354-ac3b-cc90c5bb10d0", "value": "12288:yW2LV/V5Wc0vTtmTK/WUFbTaW239E83KXjfGmCBEX6f7iLpTB8McLnhRxcCWWzZJ:yJW/IK/2WwECKKEqTiV27rp2cPRzgd6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767704829, "uuid": "d7ac43f4-11a5-4fb7-9817-76d971fa31de", "value": 1484152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704829, "uuid": "879930af-c181-4cb0-b363-01e7629740f0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92e00ee1-eafb-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767704831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704831, "uuid": "d1dcf1d9-992b-434c-8436-ffd3dc985a04", "comment": "Malware payload", "value": "dfadf64819a814bc83be4bf75d412fd7", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704831, "uuid": "eb999e10-2579-455c-b172-b00a5aa97953", "comment": "Malware payload", "value": "3fdad0c729c080c566b91990f54d49a4b5eaa6c147145882dd2c136d3d5f2000", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704831, "uuid": "e2012b5f-d650-4ffd-ab2c-3c6294bde16b", "value": "T115C62381BB18553FC8BA043308AA56B523A7DE028E92571BB55C336CAC776DC0F59F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704831, "uuid": "51199220-67a6-48f7-8947-e06431fb9cc1", "value": "196608:t3wsJTwcnvqkV/aWS1Gsg0UUG93ltLRqrose2+DFdmADTptcGXrMwW96behuplD:t3NTwcnbVFSMsg0UUGlvcroRFJd3DcGp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767704831, "uuid": "eb6cc4fb-36a9-4791-b2c5-906ecd00c718", "value": 11703298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704831, "uuid": "9f7af2cc-16f6-4d39-adbb-b006262074a8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be815481-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767704887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704887, "uuid": "6ead2a3c-dde0-4843-b187-ace2424c0fdb", "comment": "Malware payload", "value": "e52edae984aa4fc0b25d4804a3864296", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704887, "uuid": "e67fd865-3932-4a2a-af8f-57d4320189f6", "comment": "Malware payload", "value": "6077b63285d4dbeb4e5d6a5ec9ac3cf435786916c75564737d88e6fc05f1806b", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704887, "uuid": "16f16042-b213-4be1-9d4e-99c32586bf0d", "value": "T1CDC5CE4AF748956AC8F743335B36426521578C2A8F83DB836958723C5CBB9C84F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704887, "uuid": "8be98abf-9906-41fc-ae7f-ea397a7e05dd", "value": "49152:tNnx9t3Wuo+AHio3QUnylee4DwEfLIbQBvVl7gc73KXbY:tNnfzACoOlehDwED+QHn73KrY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767704887, "uuid": "99ecb7e8-9972-43ee-98ed-7646827803d2", "value": 2678727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704887, "uuid": "7e830564-7fae-4035-8fa0-c84e8799e380", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d552ebf2-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767704925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704925, "uuid": "56584c2e-74b9-4857-948e-77de95aff4c9", "comment": "Malware payload", "value": "05f3912e83dbd57fc88f062c9006f5eb", "object_relation": "md5", "Tag": [ { "name": "chrome.apk", "colour": "#595610", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "siberguvenlik", "colour": "#000b2f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704925, "uuid": "be964ea6-f0f8-4c66-b5d0-6572c3ff9594", "comment": "Malware payload", "value": "2db6b2b131da96cffbfe4f6f6a575e53e7225c29462310bcecc6be49d95dd1bf", "object_relation": "sha256", "Tag": [ { "name": "chrome.apk", "colour": "#595610", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "siberguvenlik", "colour": "#000b2f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704925, "uuid": "5a849b79-13ac-4505-a05e-177f268c9acf", "value": "T1F8B5E045BBA89E1EC873D1760D0A5236601AED63CB03C347E9742B5D286FAF84F163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704925, "uuid": "85955372-4676-4b15-bb5a-f283e41ef313", "value": "49152:TeFeYfdRM3b/IccI9rzEMBSzdQrtqccJBtKtJHeHLQbT3jZa19Lwz:TweUdRM3bHcI90WqSQJjKSmwjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767704925, "uuid": "5ec3c998-dd18-4b52-b311-91ca8a9a1d25", "value": 2441463, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704925, "uuid": "2918c79b-94d6-4ea0-9351-2b2987f2935a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c43e502-eb01-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767705018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705018, "uuid": "b9aeff9c-9102-48e8-8895-3a0cddfd3581", "comment": "Malware payload (Mirai)", "value": "5315247f6f4a58a20def98bd228b480f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705018, "uuid": "824df317-d282-4818-ae57-4ac5b5ee5740", "comment": "Malware payload (Mirai)", "value": "ad24186a6e0d6f2a7be977e27f35ddbdf32cfa847bb2bf1a1244f16b61382bea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705018, "uuid": "72d2117e-3089-4813-8c94-d3ea26f6126d", "value": "T16B534C85F5C385F6C81B4838A0DBB37FC631D9A94071599EEF8BAE36D63BA4101123", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705018, "uuid": "6692ae77-5a78-4157-a230-03a181d9bb67", "value": "1536:W8tlDaAbLfE/YQNlvFU32cafxh3zAh22Cs:W8tleH/Yj32cafP3zAhfCs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705018, "uuid": "d108bc05-7f8c-4afc-8c01-603f72b25704", "value": 62256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705018, "uuid": "1bac254d-f067-4f94-b95f-acbe8bf282d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194e6370-eb01-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767705040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705040, "uuid": "e1d243ed-fe66-4d5c-bde1-d182e81354e5", "comment": "Malware payload (Mirai)", "value": "d500bb88e94c7adf7915338958d07621", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705040, "uuid": "1fdd5bc6-6b64-46da-bad8-be58fd9c0146", "comment": "Malware payload (Mirai)", "value": "a93d680be343103edd02547e64ecb255a9bdaf532056ea59eef656e161ea2f27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705040, "uuid": "03a1f0ae-340b-4d16-8690-af9ffb7c52c9", "value": "T179432A95B801EFBDF84ED6F582160A0DF831626154530F23B767FE932D710E2E92AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705040, "uuid": "357adcda-dde4-4b86-bc93-4ea64a724907", "value": "1536:uh0WUw7nsZ/K2YwtfM/3qXQJreBeXyy8rvq:uDUviXWM/agmeCfvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705040, "uuid": "0f33b7e5-fa8c-4b41-b0e1-094155938946", "value": 60120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705040, "uuid": "3a7135f1-f1e5-45c8-a0c2-ba0184af2cdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7456d164-eb01-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767705192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705192, "uuid": "3991d62d-5516-4fe4-9e29-34d2703bcc84", "comment": "Malware payload (Mirai)", "value": "8da1a81d8a5330dfe0d62e748861f299", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705192, "uuid": "525c157e-43b3-45d2-b466-eaab11fd8dfe", "comment": "Malware payload (Mirai)", "value": "e7766504710cdcb0e741ed0c4e1349ef8a968599470b9df52a9a22dc1e9fe140", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705192, "uuid": "074da1bd-2c69-41bf-878b-32b7778f59bb", "value": "T13E73724D7E325FBEFFAD813987B75B205245339213E1C184D1ACEE060E7428A742EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705192, "uuid": "9c5af595-e2b0-42a0-a599-e201e0ca3544", "value": "1536:w1ecqk6zoxEeWawB8avOXL4HkWeVE7nbo7Pj2NkavMU/lmSV2sskg:w1ecV6zGWas8amLzFC7nbo7PQ70CJskg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705192, "uuid": "4738ad03-3457-4516-bf8b-9ada8c4e9b52", "value": 79992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705192, "uuid": "da37aea1-a643-45d2-bd48-cc7a46f8e17a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b153b9cc-ea72-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767705559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "7e391d5e-e9cd-4b74-bb88-571d7460f567", "comment": "Malware payload (Mirai)", "value": "29efe6f0bc8c5236ea0d2121b8f970ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "b408b9ec-3af8-4ddf-ac3a-fe180ff19b44", "comment": "Malware payload (Mirai)", "value": "cfd935c07f7622edcdcdec978c6202a35728b20f07837f23428ad191c669e19b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "99cbba10-44ae-45f7-8c4d-fcea370f411e", "value": "T1D4158C5BB2B3B1BCC107C0345B8BC6B11632F4B515222DBBB3C5C6302E66E95276AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "106a5594-3210-458f-ab45-7c220a7a12d3", "value": "12288:hZPHc2NWfMstyFjZD55arrq6DyCVWJSEJp2GU2Iy5/CjlOHmaOsLS/K6mKn4KBu:XPHc2NWontThCJEJpHdCT/RmKV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705559, "uuid": "1dadaddf-e37b-4a75-b9f9-c3037efc383f", "value": 919296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "079431db-5d6e-40a5-ad3c-b2e6edc7744c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec6e565-eb02-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767705559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "f229054d-d8bf-41b2-b3dc-590eab762fda", "comment": "Malware payload", "value": "87cbc10054bc930e33c36a7427e0385a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "bb3dddb0-2494-4b2f-a126-b5706ee6f0a3", "comment": "Malware payload", "value": "4de00dae20cc17858656e7d3a9ffb6d7991eb39679673fe7786cccb1555c2d59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "40310946-a284-4ce6-9179-e5f972325481", "value": "T142123047A2D0CE3FC8D953384467122472B794BEDF629713064815B63F427E81E6EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "36409b66-e980-4317-8b69-8542cfd0e013", "value": "96:GqTVJWWGXzS6SH5ML09V1J9G8Ymp+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHBZMWT1YmUhrsnurfjTr8sbnsl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705559, "uuid": "9099321e-169e-48d1-b77a-66050b6b0ac4", "value": 9800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "57ad10b9-b551-421c-9b5f-ff87d39fe26f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ef3f1ef-eb02-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767705559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "bd02c57b-c45d-4d29-81b1-0f39cd5a7759", "comment": "Malware payload", "value": "498555250698a9ebb1a77754f5b6f394", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "4f74b063-5891-4467-b672-54a0b9bb9c6c", "comment": "Malware payload", "value": "76f233bbbaa94ebc815fc7f44de05a1ee2c3a7757cc841fa3b90897a6cdfe4eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "a035e6f9-20cc-4348-8cd9-6c32126e2d8c", "value": "T1FED533EA5FC606F093E37B5E43AA976197D38F531010016AB3CE5AB4183FBB762663", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "c3fa0bac-fd78-4058-a06f-a003c20eaf19", "value": "49152:sM/6zyU33rlPEvfJmowGoIiqaXVxvvIiQu4fABBVYEQVPDv:t693rlPefCGoIipXnnQhfABMZV7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705559, "uuid": "61d49d9c-dabe-4191-b5c1-d83dc3300b0a", "value": 2877372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "d4aa12fd-2e16-49e8-a2c7-c507587e8333", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f2f10d2-eb02-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767705559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "9f34f50b-1ab8-47d5-a2a9-a4e4d4d46f13", "comment": "Malware payload (Mirai)", "value": "cdd574f847108f4c93aeb00fddbeaeb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "0d9027ee-f129-45a3-b56e-f8e178233884", "comment": "Malware payload (Mirai)", "value": "c3508a0f82231e945c1e5fde31a84ecf32146e5387e21e36c7ad65ebe83707fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "828fb022-ec45-4699-aa83-ea369d56defb", "value": "T182968C03ECA555A9C1E9A2318A729252BB717C491B3123C33FA0F3386F73BD46A797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "c573804e-529e-40b0-ae15-d46f0383f1b8", "value": "196608:5uRrX4MGiVyKsGG66WPhLioCrh/BPm9Qo:5yrX4QV9lGyJOr15s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705559, "uuid": "c5fe0000-9686-43a4-80d8-98743d2c1046", "value": 9466975, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705559, "uuid": "c4a2ecfd-f725-4434-976e-0c631708735d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "843f9b4d-eb02-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767705648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705648, "uuid": "9fb41bfb-4231-45e4-b2da-06568ce51ad3", "comment": "Malware payload", "value": "b9dec72b4d15b16d220f1c97f9faba5d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705648, "uuid": "67dfe411-0fef-4c7a-acb1-782ade5d5a1b", "comment": "Malware payload", "value": "a9321a46d9cfdd7dbf6d8adb3a4d99e458d7ca3be7c4b381e88ec6b77287bb09", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705648, "uuid": "f1f07e88-5ac2-40ee-b682-83720f7c6c5f", "value": "T19F93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705648, "uuid": "6d494374-43e0-4942-a67d-1c7fc88dd36d", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPX8IH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYPr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705648, "uuid": "8a4b5dee-e147-4e55-a4eb-3cdf09651acf", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705648, "uuid": "b7dcfff5-9e61-4050-86b6-cb44c841fff0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18857fb0-eb03-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767705897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705897, "uuid": "7efcdd1c-ffb2-4d1a-9942-0f6847f2c739", "comment": "Malware payload", "value": "695376874a5aca065247eb1df06736df", "object_relation": "md5", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705897, "uuid": "d2c9cc39-f923-4e34-898a-57e6040b2c76", "comment": "Malware payload", "value": "79c4a6eb34e69bd394a10f9ed5c5279ce38ec478fddbcd3b9d460fed6f49be51", "object_relation": "sha256", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705897, "uuid": "0f80fe56-8b2b-4519-a65c-f3084b0526d1", "value": "T18E758D07B6D50F23CA636A73CAAB814A5254DE425F05DF0FD15C873FA583B069E87A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705897, "uuid": "57e1eb33-99e2-4359-a607-519de8ec6670", "value": "12288:g2cJpR2GjG9plwZ1RL2cJpRWGjG9plwZ1R8:g9zFIiPRL9zlIiPR8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767705897, "uuid": "7f6e7389-6277-43a7-84e0-1691dd140a33", "value": 1696552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705897, "uuid": "c8fd2428-7e56-482e-baad-c6be1c99e2d1", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2984f34-eb03-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767706236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706236, "uuid": "d8463986-63d1-43f4-9ae4-529fb07a8330", "comment": "Malware payload", "value": "3799d7552785cbaa6ac3865149633db1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706236, "uuid": "031c871a-7382-4e4c-acbc-1f6ddbda9c5c", "comment": "Malware payload", "value": "c9180333004099ab695405d361bd1763c70c0fda79e11348a122eec81ebc61aa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706236, "uuid": "3cc596bf-08df-48a0-b7ff-f1bd20370200", "value": "T19C93073279895819210B028FE223377C70FFD992E60195A5F7FA323497A5EE036B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706236, "uuid": "69862417-fd7c-4ba1-a4bf-dca7c88c6863", "value": "1536:T8ap+tC2Y6sJNeIfIxVqpYJKNoptpxh3ttrTPcNbL3FLkLxIB6FG43tGpUNfQvtN:/6C2Y6sXeaITtpbttrIN/3FYLxIB6E4K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767706236, "uuid": "b52000d6-f7dc-4c6e-b6a1-cd9e21d8e5b6", "value": 94353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706236, "uuid": "65d54d47-f4c8-4556-9657-0ecc8bfb6d7e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c26385-eb03-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767706240, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706240, "uuid": "a1c16e00-d3f6-4db6-aab7-8949e52c63d9", "comment": "Malware payload (Mirai)", "value": "0c15ef647035e89f54d92c9403d65466", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706240, "uuid": "25f6edf6-0c98-4527-b6be-3f2d23f785d3", "comment": "Malware payload (Mirai)", "value": "c8bc60f2b1ebfae6c2055a21312357cecca4f70ae72d79943e22f86164dd6a1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706240, "uuid": "3128b4c7-f401-480a-9a39-98cf2f0f204d", "value": "T11373A40ABFA02EB3D8AFDC3349AA1B4625DD551720997B79BD30D818F60E64F15D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706240, "uuid": "adb5d26f-e93d-4147-bf70-b1069a71ef54", "value": "768:9y29uZs5eGHOsR9lx8MEwzfHrj3/9VZxd+c9vufd5uxejlc8f/Wh7Tzrb2757meL:9y29WsUGlenf+x27MCEZajx38ZGyKZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767706240, "uuid": "5902a27b-4ee2-40f1-9148-90eda8dada40", "value": 80392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706240, "uuid": "1eb13d99-ce02-4b7e-b45f-edfb4afd7c8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff25eb1a-eb03-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767706284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706284, "uuid": "5241567a-faec-4c03-ba4e-0e95caa9bce1", "comment": "Malware payload (Mirai)", "value": "b39421359b8d03bc34ec9c185ae587aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706284, "uuid": "9cb080eb-6b66-451e-8354-b6c9827b6016", "comment": "Malware payload (Mirai)", "value": "643a0e670a950589b77ce40e752229a2771a43ffb62182562b6c7e83ce1a8651", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706284, "uuid": "f74f372a-f198-4f59-8cce-bf92794b048c", "value": "T13C433A07AD8486FEC0D9E17816BF7232D162F4BE2375764B27C4FE2A7908EA11B0D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706284, "uuid": "9ad4488b-4b3a-4c55-9f80-96b739878f1d", "value": "1536:CxnNmgDnnCMheFX2UOimBQ9gOSrFFIBgs:CxnJUXdOiIOaFIBgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767706284, "uuid": "0e1776a8-d238-4d81-81f0-04a094255e65", "value": 60192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706284, "uuid": "1de33ce1-317a-4306-afb3-63719fe86614", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1860b4c4-eb04-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767706326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706326, "uuid": "7ce65cc8-73f4-4c53-abae-77b907b11dc1", "comment": "Malware payload (Mirai)", "value": "ed96585f649ce152d1eee3f6b1df47b6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706326, "uuid": "d33b1b4f-e425-4a1d-ac6f-8f5c898918de", "comment": "Malware payload (Mirai)", "value": "4dd95b2c87b7290050c038b98f1f87ce25d54c0d8b6509cb1fba146e9f662e74", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706326, "uuid": "03e551bd-4e40-4722-92a2-6afcaf8f8db8", "value": "T12ED47E9CFE4E3C42E2C7E2789E4E87E1B22771E0D72391A37582520CD5CA9D9CBE19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706326, "uuid": "a85fdde0-f7dd-4334-9a7e-aeb07e082961", "value": "12288:EaSiWaYQTgMn4Z8EgUCMvwZSNZy1neDEJgEG8/V8SORXw5kXF8AT:EaxxYQThQCMvwZSXy1ysBu7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767706326, "uuid": "6ef66131-9f1b-4fee-b9cd-e927f715d4fc", "value": 639952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706326, "uuid": "a25bd457-f7bb-490a-9ea7-a56b910648a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4db0e878-eb04-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767706416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706416, "uuid": "d3417e2c-fe55-422f-8e2f-5268d4b2962a", "comment": "Malware payload (Mirai)", "value": "9ee9d01dd3fa82b4c9e5442b548d7025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706416, "uuid": "4d2c54f9-e2e4-4d2a-9939-fee6bc5dab08", "comment": "Malware payload (Mirai)", "value": "d38c7c128ec65c2bb900ba770790a8b5702c1e3325da7773cf3ffd27bff2317f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706416, "uuid": "605a08c7-8bd1-40d9-b2f1-e4cea395929f", "value": "T1E4F45B06EF850FDBC47FCD70492E828716ED9AD706D0933551FC8988BACE66A4BE34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706416, "uuid": "62e45f58-cdf3-42aa-9afc-83dc741291f2", "value": "12288:4hQkYBZqC1viI6OjhqzLzdzWzl1lgmzHbiIAWcK0GOq4hFxlSyIr9EdTR/Q+Ci9a:jdyskRs6wymeUYN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767706416, "uuid": "54f5bf05-e40b-49b9-9394-c46e02df3c11", "value": 730456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706416, "uuid": "0cd68b6c-49d6-47c6-ab40-d22f3d987975", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d51b74-eb07-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767707830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707830, "uuid": "2b601426-297f-4c71-916a-3ef2117f2944", "comment": "Malware payload (Mirai)", "value": "3841d9e1b1311b83c9ffe038387f8668", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707830, "uuid": "4904ce22-2f07-4e97-bc89-79e43182a3a0", "comment": "Malware payload (Mirai)", "value": "981f9cd6a20d4bca838e92d4b7e28ac0a4e9cd325663f291493966d77020d8a8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767707830, "uuid": "9c16f0fd-3617-4951-a2a7-0c8743960ea1", "value": "T1B1C45C59F8409FA1CAD529B6F65D929C33070B79C3EA720799245B343BC78AB0F3E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767707830, "uuid": "40811dcd-5929-49fa-8db3-de7bc88d8548", "value": "6144:wUXT47Q1fjVyVyQ1GB92FoXCeK1dDQp0vK6yjoUmmGXJVJ8nhTVnGglgpZ6mvAfF:wUDamjVsunEREm98nhxTgpZ6mvE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767707830, "uuid": "2f488a40-5d5e-41fa-8701-a75e59100cd0", "value": 554260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767707830, "uuid": "d7a6b66b-aab4-4d1d-9f5d-7b69143e19b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b15089c3-eb09-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767708731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708731, "uuid": "8fa55894-63c4-4768-8d40-0ea42283a3dc", "comment": "Malware payload", "value": "d85463d4b8cee065f586ea55f88d9383", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708731, "uuid": "0cc8ca1a-0fb3-4c66-9532-a88c8976716e", "comment": "Malware payload", "value": "37bcf517ce96633791c8ef208a17440dfd62aa15dcf9742ced851200b3a6033f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708731, "uuid": "55f41c54-6499-4289-9901-415c5aedbdc8", "value": "T17F82D050BF4544EB5DCFE7E51C87DE69826917A49C430FB7012A8C2593EE23134ED0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708731, "uuid": "288fee17-f15c-4878-934b-ca4db0b1e880", "value": "384:/HFx1NDjl1jRMjxEJd/Ir7RzTWJKQFFGYm9BXQfolCgLIVAKX+5:HbDjn28IJTQFF9WQCRALO5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767708731, "uuid": "812e9711-155f-4cbf-98ed-87214c8ddbc5", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708731, "uuid": "8204ec44-b6a5-4cb1-ba65-a4e9d6c7baeb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ef8d18c-eb0a-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767708915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708915, "uuid": "380971e9-925f-424e-b28f-3088d537d565", "comment": "Malware payload", "value": "1301a4c15cbff0a2822e00c2c9ee4cc7", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708915, "uuid": "d8d84dc9-4e25-4ef1-aa18-46e594182f23", "comment": "Malware payload", "value": "52e12c457102a51e41bd42ed8585673fa13c81d75aae5d7250f9b60d69f0f42d", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708915, "uuid": "b0e35309-d74a-4e81-80cd-d01710cadd4d", "value": "T1A426129712EAD43CEF2199352F2174669359837819F88FC4708D5FDC4B602BAE3B09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708915, "uuid": "6dfb9648-b9bf-4e7b-9b66-97e20b3bf93f", "value": "192:qUPTAU2lUcWPxUZUUXEP4UZEU0EPTAU2xUsUU8UyUUFWPtUZSUNEPRU2sU0WPtUr:vVhKF07iT3uxOYQUq1qUA5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767708915, "uuid": "af53757c-f756-49ef-9063-6f0d44651320", "value": 4803473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708915, "uuid": "e093871d-0730-4de0-81e4-b2c1f26a3138", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14558843-eb0b-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767709326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709326, "uuid": "a41ede1b-29cd-4d61-aa85-714743cc6ae7", "comment": "Malware payload", "value": "984ea8ff43bda12d1999b31d3355f375", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709326, "uuid": "bdee4617-aaba-4ce1-b33b-ef8faa757302", "comment": "Malware payload", "value": "e4ef9e3b63d39aa5f72cf8ee5d2f3cd3f7643d61ca6fff2169cb3e3eeb2d66b9", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709326, "uuid": "725ec28f-d325-483a-87c9-5e3147edf586", "value": "T1A416D4237AAE9E439E763352CEC77257E435A0AF68E9CD1AF15430C9CE20745D8B58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709326, "uuid": "0f492062-d7f6-42d7-8c1e-0e3cbd322ef1", "value": "768:allllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllg:p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767709326, "uuid": "9057a8a9-0fd1-4a53-8f19-bf6a137757f8", "value": 4406005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709326, "uuid": "74a8b041-38ea-477f-98b0-1a589fa5e534", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "913c8ae2-eb0b-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767709536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709536, "uuid": "8be83a5a-414a-4539-8391-2705607977cc", "comment": "Malware payload", "value": "a69e2ffdbd94f40d77f826d52afdfc6d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709536, "uuid": "9a89cae9-9be5-4bc9-b255-2ecd61c191a7", "comment": "Malware payload", "value": "016d06a39b83669852ad5d8c4a32647f6ac1531e375b6c0b72d7f91b7e1169bd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709536, "uuid": "ee67fb48-f05e-45f8-b415-5b98d2c3b603", "value": "T1FA56233339A0AB4BD39462F136EA4444FEBD596405854D206EA7BB0BE2DC3887C1E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709536, "uuid": "6f856887-d0c3-4e6a-b1b5-7f5a3d2951f6", "value": "12288:p1ZW6nM+P9rv05BbVHctHK3XHps6Inr0fp6nlLpUZ5DNkE4qdxCQ:pDnndN8XVHVvfp6ppMlhK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767709536, "uuid": "17011558-3683-42f2-9b25-181873aeca04", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709536, "uuid": "ed3b10c7-489c-4921-83e5-a6716dd3b914", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0af5645-eb0b-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767709669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709669, "uuid": "2e191896-397f-4b80-9d20-61803c2dd481", "comment": "Malware payload", "value": "3ea175c6298159dd01a229c4d0b97c47", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709669, "uuid": "d717f3e5-24a6-48d6-b090-5e8da8d97597", "comment": "Malware payload", "value": "242ce05acff00c6e81ccf2c83db6017cccd6b0e16fbc182c3a20b92ad8a72ff3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709669, "uuid": "ba42c9c4-d18f-4db0-8fcf-2567fd1f9f0f", "value": "T1BB34F10987FFC4F8DCB169F17BC9B5A23DBAFD5E09501D88BC83A0766A8954D2CA11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709669, "uuid": "830a7b5c-1fd1-4acd-988a-dfd9b3e103ff", "value": "6144:LfCBn7mwg2W2ZJ+Fgutz7bUZpwU72tNPPePPPPPPPPPPPPPPKyGU:LfCBfg2W2aXRbhU727fU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767709669, "uuid": "1a655d7b-1eef-446b-b37f-4e27f6aeebfd", "value": 247897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709669, "uuid": "0d1687bc-6df7-4554-a990-bc4f0a848508", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9da3a48e-eb0c-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767709986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709986, "uuid": "c95096f8-3643-422e-a4ce-a83e2405fd07", "comment": "Malware payload", "value": "049de082e7cb313bfe8631e5d03d70fb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709986, "uuid": "0c958a16-52d0-460d-99ee-cb60334adc2d", "comment": "Malware payload", "value": "a5d512a60a8f143de06511f726cb40d40f8966dfcb19a3b9ee85486c2326e192", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709986, "uuid": "cba429f3-480b-4d09-97e1-231de8e82adf", "value": "T1676402331ED7469DEC643FB85B93CE080396DA9E4212E5D4E590229AF27CF260C784", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709986, "uuid": "af24ef3b-37ce-4dde-86a5-450a296be742", "value": "d5d9d937853db8b666bd4b525813d7bd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709986, "uuid": "6c8ab6b0-de52-4606-8529-0c281aba0712", "value": "6144:H0mlk5ClDW6tAop/ih1WdvFNMim2JK42gw/6eUrXHasrtlNkeyf2JU:lq5mDWk/iDWd0im342XyedsrtEeyX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767709986, "uuid": "912013e2-1a96-4733-8b80-3a66c4b1fbc5", "value": 316416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709986, "uuid": "8c85b6ef-6e97-4661-949f-1b90264d5207", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2aa8e74-eb0c-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767710075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710075, "uuid": "f3c9e532-483d-4c4d-8bb7-e2ade7faed86", "comment": "Malware payload", "value": "6f78ba7845ebbd259e5f3e132d71e98b", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710075, "uuid": "42b11a23-4bc9-44e5-b325-140d2125d1fc", "comment": "Malware payload", "value": "fa28fa36a61f1a6e28b464d0b0af8b92ae17ddc3b199226476992e6cf0612384", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710075, "uuid": "d11632e3-3ab7-4d5a-a4e3-24fcd469df6b", "value": "T17E8124674599941A6271C1311AE2B0088F759187A30E6DECF59D61CF8FC1FC8C6E72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710075, "uuid": "56389eb2-2aef-4703-95d1-30f2f16e7456", "value": "96:fIx4yQoP66NZ16K6LICJC3ip0KFJwIKe4K2C:M4poN5Xip0AJwvc2C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767710075, "uuid": "564dac67-ded4-4196-b242-c808a184497a", "value": 4138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710075, "uuid": "d4c6c023-0d8f-4210-8b56-bd8e32f99d1d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e7d58f-eb0d-11f0-8990-82aee05be84a", "comment": "Malware payload (PureLogsStealer)", "timestamp": 1767710287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710287, "uuid": "50f63585-b9f9-4838-9037-130fb9f76a67", "comment": "Malware payload (PureLogsStealer)", "value": "27d4c6b21fd7b40370bf3313033e03a0", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710287, "uuid": "1406fb28-8379-4b9b-a1f3-1c801f79b0be", "comment": "Malware payload (PureLogsStealer)", "value": "1dc3c1b3a129ff39aa9603c3ddd01590e4813224a25f5e350f05b3dab8801631", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710287, "uuid": "ba0a4c41-f347-49ea-bf97-78770366561f", "value": "T180F39D4A67E420A6E4BA57B498F203939A31BCB15B7486FF12C4D57E0E336D0A532F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710287, "uuid": "a7be95e2-86f6-4f4c-96b3-7493004ac2d7", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710287, "uuid": "7571fa70-8710-4e34-bb48-a7af9d3fb7a3", "value": "3072:wahKyd2n31m5GWp1icKAArDZz4N9GhbkrNEk10OBT:wahO2p0yN90QE14", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767710287, "uuid": "a461a2ef-c67c-4541-999c-30919fdc2ac2", "value": 169984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767710287, "uuid": "b142baa2-100d-4537-802b-ef14910d8e8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c993a874-eb13-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767713066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713066, "uuid": "0823be0f-502e-4303-8609-376a24fb35c1", "comment": "Malware payload", "value": "457efa9ee31e2c7386aca69956407071", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713066, "uuid": "f94f88b9-1478-4325-8bdd-198e9ae6de6b", "comment": "Malware payload", "value": "5b445bace91d84c363c4a10b8e00ffc4f38463690281df9bac76b5b977f5c738", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713066, "uuid": "aaf0dcf0-d8e2-471e-bea3-1a0496b4c2c5", "value": "T14E41103310855A4B42B783E9D591360CDA854387662EC9E2F9DD062F0FF2F46C5A77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713066, "uuid": "da7c764b-7552-4c4a-87a8-9e8df4baf8bf", "value": "48:0WfxUvNY5mYsmYLnmYozYMlYLcDNuFcAZ98qify2:nUv1QwcDw13gfh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767713066, "uuid": "15e4070e-5478-4190-91f9-82a106c20c2d", "value": 2327, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713066, "uuid": "0cdc16ad-b343-42e8-b27e-2aa1a63ae691", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82fcd192-eb16-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767714236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714236, "uuid": "f4e9bafb-d56b-495b-9d05-30b1794ade40", "comment": "Malware payload", "value": "cb931e1758851f5a63d01ce338b308b0", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714236, "uuid": "d0d6dd18-d6ae-4f9a-a3f7-40e0a6b34605", "comment": "Malware payload", "value": "0b11ad0344d57fa9250ee12190ba9b57403d5eb65522e2af040951f00ff29a8c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767714236, "uuid": "16175778-634d-403c-b9ae-d4ab897aff58", "value": "T1B15623607A2C2F62D7D0D2B63BCD18C17350F4DAB8713C52ABF6170067DCE6E2A96A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767714236, "uuid": "280561de-3c02-4e97-a4ca-060f2c3963ed", "value": "12288:J40cikTCLlkl5lqu3QwT6qd3PBIYUthZ:J4JhXdAQ6SpIYUtL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767714236, "uuid": "7acaeb2f-733f-4691-874d-2fce5e384649", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767714236, "uuid": "0e89e7a9-a8a9-44d2-95fe-07b16c4c6e12", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09b13adb-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767715751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715751, "uuid": "f4530bd5-990c-4a6b-9159-1fca8cdb7a95", "comment": "Malware payload", "value": "88b8dfe3c56287a079f7d7917116f3d9", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715751, "uuid": "ca945397-c782-442a-9537-48aa1ca96f6f", "comment": "Malware payload", "value": "cebe49b2aa29dbd4524d5024945f5e590d564cd5f5991c02ce6b62e8e7637f7e", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715751, "uuid": "e61f51d5-c9bd-410c-936f-7fc87f54186d", "value": "T16D761203F74E492ECDD6BA78496713716A166CEC1920928B4E02F318BEB36D95F25F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715751, "uuid": "e0c72e6c-3818-42cb-b7c5-81c65e036edb", "value": "196608:+hccPe2oTYZY8jobYKWTxIxVWA4m23wozpGk:v2okKWVHQ29z5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767715751, "uuid": "d298e1c0-e65e-4a21-8a5c-4413eddf4964", "value": 7482121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715751, "uuid": "c4c07406-12a9-49fe-8c7e-0ffa6a165786", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "290812b4-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767715803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715803, "uuid": "2e37a12f-8ea5-47c2-b92a-9406d0c33b0f", "comment": "Malware payload", "value": "e0c6ebe331c4d1b87d8ffe2b5319bd9d", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715803, "uuid": "914d88df-7132-4c5f-8402-082483cae2a1", "comment": "Malware payload", "value": "a2942fd6c75748264c0231eb72e3ab121c0be6cbfa8b47e1c2e8ec2b20676904", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715803, "uuid": "acd0d007-3d77-4927-871c-fb22c7ad3264", "value": "T1EE761203F78E492EDDD2BA784963137166156CEC2920928F4A02F318BEB36E95F15F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715803, "uuid": "b6ce95ce-147c-44dc-92a8-c6e98eff7b31", "value": "196608:+fccPgUfSOc2Lry6hPmGCVIG3QV35nGbp:YSOc2LG6hORVBp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767715803, "uuid": "19b34052-3384-48cc-b6f2-70ad6ea95568", "value": 7482121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715803, "uuid": "1aae6948-cc7a-4005-922a-1124ca5a7067", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde51ae-eb1c-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767716805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716805, "uuid": "5d0ba9eb-be41-46d0-98c1-f0e6d5bae13e", "comment": "Malware payload (Mirai)", "value": "6c0d34765e9d81a8b1d75fbe92fd642a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716805, "uuid": "851f8c56-c6c7-4fe9-9fed-56f7dbe721ad", "comment": "Malware payload (Mirai)", "value": "9d6aafc9c277bb26880933b244a646c444b4e855fb5a4e65217f08078f56a039", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767716805, "uuid": "6b63ef63-ce34-4ceb-8222-f863eac776af", "value": "T149C44B55F8809F62CAC52976F69D829C73134B79C3EB72069D144B383BDB86B0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767716805, "uuid": "0f21a100-5513-4b3d-a21a-24b47bf80aee", "value": "12288:irgkFZLqS0X5QV1rYWA2wMIjDOCwhcgpZ6mKCI4V:TqLwQNwPUAN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767716805, "uuid": "937dbb65-d74b-4d8d-b8c2-13666390e65a", "value": 566440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767716805, "uuid": "2e8dd212-d629-45df-a9fe-cd0072a5368a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21de3ca4-eb1f-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767717939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767717939, "uuid": "1d757d94-870c-40ea-8812-1c76bfa9cf19", "comment": "Malware payload", "value": "e3543e80413724013690b3f79075a449", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767717939, "uuid": "0df1da3b-ceeb-459b-bfe2-f1e90d5e6244", "comment": "Malware payload", "value": "921047d86551a97f239e837ac4e0e7d4fb84d0275e5cc911a864913f617bbd62", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767717939, "uuid": "8a9c0ec0-ad99-4d33-9835-33d7b8e10795", "value": "T141C62381BB19983FC9B6043308AA86B527A7CD12CE92574B745C375C6CB368C0F99F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767717939, "uuid": "1cd3903f-3302-404d-bd54-3df2e3adcc86", "value": "196608:XIwsJTFcnOYryUCQCKyVavuFRyT/qTahg0iZlltqm0nJ94dfyze33/Ie38eyrm:XINTFcnOm9CKgRyTZg0iZlmm0JWfy6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767717939, "uuid": "b3b70390-5a60-4530-8701-8bfaca49da80", "value": 11473922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767717939, "uuid": "2069177d-4256-4201-80d8-cf5d8b273d7c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc2e439d-eb1d-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767718176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767718176, "uuid": "45fb0f14-af30-4c5c-b7a9-da240e34ffb6", "comment": "Malware payload", "value": "d7893bec042cfe9f8fe24f8ce5d26b94", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767718176, "uuid": "76ccc8b8-1b38-425e-8800-f8b77575d3bf", "comment": "Malware payload", "value": "1753b0275fe90b2fad17c88ad7d36616df08f1572106b35f2c873166da975cac", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767718176, "uuid": "e5f3a38a-52f5-4475-8088-68ce6cca4751", "value": "T11537338FC8311B90E328153DA0CEE75E1B908C99B586CF7895D0E44F0C5A66F16BEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767718176, "uuid": "61bcb1de-36c4-43a2-93e6-0d2aa5a50b5f", "value": "393216:JzFqNNF5dMuI/0xjyq9io5aDNljIReW/NVkTnXS3rSO9Hv2IrI8V1CEO+f0:3qNNFi8xjp9iO8QRJNV0XS+O9PZV2+f0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767718176, "uuid": "58797c84-aeac-46e6-931b-243b4cb3cd71", "value": 23730536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767718176, "uuid": "5d67e2c6-4778-4524-bcf4-7ad284eb1c23", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a14a0a6d-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "f0899cbb-a6bd-4a23-892c-89a75dfdb211", "comment": "Malware payload (Mirai)", "value": "f10dd5d061f49f5165f7eddd797089b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "8ce13a1f-1d0e-435f-8753-ddd2fd630246", "comment": "Malware payload (Mirai)", "value": "bfb9992f05345fbe650a8151a8065a902c35d01e8c86862cfe218de7ae569ecf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "dbecd921-90c9-416e-a5a8-4b03b4552b61", "value": "T1B5D3CF31F400ACC6DC210AB434BAA5B80B61AFB407D62582FFFEE95A9477D4439BD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "57487b23-817d-4929-b22b-6f3001cf793f", "value": "3072:+SaGSyl3UPm3+T1hC5x6ELmVkYC6szU1:+SnlkPm3SZJVkYCno", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720730, "uuid": "3479b689-bd53-4506-961c-16611c285427", "value": 131676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "2c5bd5db-a47c-4d48-9345-483b1858c6b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a14c04e1-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "f72eee43-3fca-4116-89c8-fef7cbea1445", "comment": "Malware payload (Mirai)", "value": "843678e988e7b94f20eabb8f6bbd2633", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "4dcdb476-76e0-47d5-8c75-8903002aae1a", "comment": "Malware payload (Mirai)", "value": "2107c1a79e0cfa5d9b9a8f272c391de85b3ef6ff72a0d5529aa5af6d03e3e096", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "021acdcb-39cd-42b6-bf93-6ade5f52235b", "value": "T151149120FA0663B1CC720A38A7956E5A6E7B04559FEB26312D1F533DDE628509F30F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "b3761be3-e1c9-4bc0-99fe-3d21a53c9739", "value": "3072:I8CUrCSw6UBNPFhwnKqofeJy3fPRxwum57UKd:vCUrZw/nNh8AHRXs4Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720730, "uuid": "eaaba10d-b94b-4668-899b-5861a5e7dfb9", "value": 193140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "6b40be52-0994-44a5-812d-62ec2f4a6269", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a152eaf3-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "35185226-2cdb-4d2e-9742-1c6abd53b1d7", "comment": "Malware payload (Mirai)", "value": "0e05fb14f187a1a5e6b099c102e3e138", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "0788a6d7-6c97-487e-96de-33208947812c", "comment": "Malware payload (Mirai)", "value": "0b86cfdaa2a44f58a163cef54053f0bf0423d94c837de7e7571399a17cca275d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "2d360056-abdb-48ee-8fdf-411059cbcb73", "value": "T1DFA3B087A550BEEFE0985E7FC453CE29FF20CFA05A831B25A0B9F5805E393547692D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "1d39adea-1eec-44cb-ab0d-b096b9a23bb6", "value": "1536:pIamHCT0JuAB4ZcxKuaafMsnHi+gXvkKjGb1pOVDF9ylvb8rSF:pIaaxJuo4ZAKzAHi7kK5DFsUSF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720730, "uuid": "2a90b676-446d-4337-a1a6-504da767d6c3", "value": 106936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "c1741e6d-97cf-40ea-82d0-e56f0d6c162b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1532c32-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "639ac2e3-e15a-4a44-abab-68e24ee3dd2d", "comment": "Malware payload (Mirai)", "value": "3fbf1d3e9e5dfb523044d88bba9326a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "1a8ac84e-44b9-4374-b9c4-45b2c1edde68", "comment": "Malware payload (Mirai)", "value": "9b85124e476048b3120a3cccb781a6bb1b7b340c0ebccc7ac5b87ea2ddaf2c0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "a5d771ef-e6bc-49e1-8177-f2123471de5d", "value": "T1C5C3E1E4F9136882D1A302FD98C156C287906DB6CF52464912ACF6B83D3D9FA0F58E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "dd9ecb95-3f6d-4316-8422-b28716f7887c", "value": "3072:Q5j5meenOrm89N18youfSXdWx+8wQB60qiMMTnw:+WO59aufGdWV6ixTnw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720730, "uuid": "d86ca3ef-6ace-45a5-bb73-ad3e5027d07d", "value": 123736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "e79402a4-1577-4ff2-a184-a92b13b5917b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a153924f-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "15bfed57-7dc1-4166-81f1-5e175d037aa2", "comment": "Malware payload (Mirai)", "value": "ea6b8019e0c3ac353c119f6a836e8b1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "098428ba-7d34-4ba6-906e-5d20980081b1", "comment": "Malware payload (Mirai)", "value": "f836d085bef13ee053e9a13e60ac42e4514db399584d3ee9d7ba323bc97115ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "c7a9a2fa-1cdf-4915-8c18-5f71f961a412", "value": "T1125302D24932367BF02460BD77B2589987C96DB09EA6A35B679C115B3270F49B11C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "a3b6c10e-db39-4924-b2e6-f05b9ede688d", "value": "1536:87S1symLz4ab7sU4Gpk+x5cpzT2M2h5cB5sUvDAQ6:8W63jsFhzKME5ANMQ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720730, "uuid": "9e1f1c0f-5390-4d7f-b72c-58d035b832b9", "value": 60676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "990ac1fc-d206-4f46-a9d6-5805ec7e67a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1664d8f-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "5b616848-bba2-4334-914e-3c2edd21792c", "comment": "Malware payload (Mirai)", "value": "3487477662372f98a99654e4739d7a78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "38edf98c-4039-4997-9ba1-cc4ddb13196e", "comment": "Malware payload (Mirai)", "value": "452d365314d50251d703517e2a94715132ba64756f1cf0b59a49ba313bf1d700", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "80390014-f8b6-46f6-b653-d76428c87f0e", "value": "T1E2F3292F358191F0FA411B746BCBD3A76C690BBF10A991DF6B416329B6E0B77A02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "b72e6352-622f-4081-aa4a-f347705a80f8", "value": "3072:ndEEHPByB9efe10gcNbYKcjUpFSdjh1l6KrOzNgsQmNdWySq655GQUXv:nujgYcgdtapGedGq650x/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720730, "uuid": "af224bdc-b733-489c-a7a3-8d49e94d3904", "value": 172628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720730, "uuid": "e6242908-9d5e-4493-a97a-10aa794b2060", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a524c380-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720736, "uuid": "f9567255-634b-48e2-bad6-f7acec2c89fc", "comment": "Malware payload (Mirai)", "value": "e20d891bf895b7e38fe9483e9cae2ea1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720736, "uuid": "34952358-a26e-48c1-a2eb-aa1b26ed7e20", "comment": "Malware payload (Mirai)", "value": "734932c1c9858fb03d93db4910277ce092184aa5f83765e5a12c629472e957a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720736, "uuid": "19ecd379-f6ef-477b-8bf1-293098167dc1", "value": "T15463011CA096B03BDE945CB5607826CEB3708804B0D7ACC1E26F7799A600DA756DD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720736, "uuid": "b7490463-d807-4eea-b3e9-fed92d0a49c4", "value": "1536:IxgCthwo69W9ZW6pxyiBILOS+H1szjKYMAaArPG:Iptt69WnW6pxrBw9IE2YMPArPG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720736, "uuid": "a7a90dc3-2b95-4b32-9822-9a2a76632c27", "value": 67540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720736, "uuid": "54c3815e-f438-4aaf-a3bb-53fa4c91055f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a53a468d-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720736, "uuid": "153332f5-8ed3-4034-9450-808ea465b485", "comment": "Malware payload (Mirai)", "value": "daa86043cd24eaa323b9261bfa3099f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720736, "uuid": "e8a77e69-095b-4490-af6b-71de8115ce55", "comment": "Malware payload (Mirai)", "value": "0a9b0045fa03c700f203bed255c2b80307461d68b458df3120b3f0ceae607240", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720736, "uuid": "af50d5e8-0f21-4f27-8379-1d2d2a272c54", "value": "T101145B2BB3C3ACE6D11163309C312362771FCB091954EBFB9E1B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720736, "uuid": "11943635-4bc6-4257-a6a1-2d34560da5ce", "value": "3072:l5ZOm515ds1smDkaF1E5QH4bOSkSyMfL9vy4zNb2NCsXo7IKZ5tA:l5ZOm515ds1smDhuk4E4OCsY7IKTtA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720736, "uuid": "ec48e5fc-7198-4a30-a1bb-8498725e101e", "value": 197384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720736, "uuid": "386ccb3c-7e54-46d4-a36a-992a2040fa47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9387ddf-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720797, "uuid": "d51ae9a4-8b42-40af-804c-4c1cef4aecb5", "comment": "Malware payload (Mirai)", "value": "7b0122b5809aad1d3174a49a1c4473ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720797, "uuid": "62c16f04-9efc-456b-9260-d22dc5ba90b5", "comment": "Malware payload (Mirai)", "value": "9d82f8e5e8b69994dc0144c208478805fbce879582feb50dbec5a404fb4a97ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720797, "uuid": "129f7c38-dc11-49a3-a041-37b9b54b48ea", "value": "T10E6312E829B259F7DA58877447B6BBF1FEED7130D5A5F1ACF87C90428E3A44812004", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720797, "uuid": "18ea2db2-ed2c-4c35-a3eb-31eb1378ba29", "value": "1536:hlC3Gfiadk3jwC4BfVy0NMSodcgQXC9xOf1VGGv/ixMF/oru+:zfiaYf4BNUSNCDmnGgua/S5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720797, "uuid": "2333b2ae-ddb4-4649-8783-3e2dfaeb5995", "value": 71956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720797, "uuid": "b4fa9a31-28c4-4c5b-9691-2bac9ad37587", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecf43e1b-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720857, "uuid": "411b38b1-e267-4324-91aa-c0ee85df8e70", "comment": "Malware payload (Mirai)", "value": "5b9458a272719a5f14f373f149a95bba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720857, "uuid": "e9204bff-1ca4-4958-852c-9ee06e3e9e3b", "comment": "Malware payload (Mirai)", "value": "1a7dff0a538f10468c3918e50735de858cc105c6626015a9d0e7ceaddc0fc35e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720857, "uuid": "b8f7e88b-8c56-414f-93d5-97f86fbb68f2", "value": "T19F6301BAD033335EF6358CF9960899A04093EEB1B783C3646FE1194E359E53DA149A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720857, "uuid": "51a537c1-bfbe-4920-a804-e2af40c29dee", "value": "1536:bgsSrzybdXlMQuo/qmje5zFhOz3nZjhNpnW5hhZpba4bNS:jS/8dCQuo/Jje5zzOzpvhW5hfpbakNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720857, "uuid": "68fad996-eda3-452e-8e86-2bc415a777ae", "value": 67976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720857, "uuid": "41d8220d-9dd0-4990-9c85-8c10bca081ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12197eab-eb26-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1767720919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720919, "uuid": "1aa9bc18-2bd2-4591-be17-0354d491d55f", "comment": "Malware payload (Mirai)", "value": "d0e9b058c0f984e76d28db642b33dbc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720919, "uuid": "538da44e-96a3-4db2-b13c-89781499f856", "comment": "Malware payload (Mirai)", "value": "04adac82ae46cc872e97966aa098af0dbe01e3488572c1a6cb22c7a8eeb7e7b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720919, "uuid": "c3911b86-fb09-4742-afc7-fb506171b47e", "value": "T13DA3D040B710EE4AC02222FCB1C50944E7B16DB60B96550B55E3F9B82EBDCD87F46E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720919, "uuid": "965ad4db-bc1f-47aa-84d6-5c1046c305ad", "value": "1536:QoSBiYmvjeEXNBVSa5qgF/Btmo1/iAe27SGCh75GepUOZ1sRPIsrppKpLwgFGRw6:QFueEXNkgF/riAeZh751JYRPXrKJwuu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767720919, "uuid": "efa83a7c-665d-4da1-8714-bc960196bb66", "value": 103608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720919, "uuid": "d807e7ea-15f6-4fbe-923a-50521b3e4b38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc2d5993-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1767721687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721687, "uuid": "448473b0-afb6-4598-a714-1422a10088d8", "comment": "Malware payload", "value": "ab5efe7b4e42ac67d26839f54a93e471", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721687, "uuid": "ceacd59e-8d22-41cf-812f-4c2b78b3fb13", "comment": "Malware payload", "value": "50064ae6fa1fbae3ac0c109c9cde6a5e101e5bb62e6308fef4626e4ee1b90f2e", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721687, "uuid": "f16262da-d914-41c4-a118-ef81a2424aff", "value": "T1DE761203F74E492ECDE2BA781E63536166166CEC1810929B0D02F318BEB76D99F25F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721687, "uuid": "b20f9201-23bb-4cc8-8da9-0a1d6a829971", "value": "98304:P21Xsi2WvccP8K/l/VGgYSPPXwftdUAKwj8/VE9hkr8r/YVKdr0SmG5:+zccPPrPPgfU/V4hkroYVs0SmG5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767721687, "uuid": "75267b96-0124-4d1c-9be9-88acc351b19a", "value": 7207689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721687, "uuid": "bf73e3fe-8caa-45a7-8698-155254111c16", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "388a39fb-eb2b-11f0-8990-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1767723131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723131, "uuid": "c61e4b4c-8fed-413e-bb25-7658bc054b0e", "comment": "Malware payload (QuasarRAT)", "value": "f7398df9b4a2f27568ded2f1b750e65e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723131, "uuid": "789a2944-7352-42a2-8aba-276bcd64d652", "comment": "Malware payload (QuasarRAT)", "value": "2ad6a919f8256c9100324af50c0894527bb71f344ecdfe1e1f00b4e708ff8481", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723131, "uuid": "d37f8764-489a-4f4a-8334-8e122b1843e2", "value": "T11E86332E94F2DBE8D6B9D4F616FC127E05E3781F31DFA1A967EA4511BA090C704380", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723131, "uuid": "5f08d02a-ec31-4cd6-8522-548bc1c926cb", "value": "60559adcf3698c3eb3c69577ebf28413", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723131, "uuid": "66d86aec-1d0e-461a-b719-f327869f7fc8", "value": "196608:QMLJZvVtypBrzn7GMhO6c/iODP2m95RlltjP2JKYiHB:QOJZvVEnrT7lhO6cTDOE5/KJuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767723131, "uuid": "cb47140e-a07a-417a-8844-92c9bc25ae95", "value": 8110592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723131, "uuid": "44ffbec4-2a8b-4048-84e9-f9655413622e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1767724089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724089, "uuid": "5ca08673-fa11-4728-9302-5bc090003561", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724089, "uuid": "dfcc1b89-cb59-4849-8187-498a12a6da39", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724089, "uuid": "48cfc7e5-e7b6-4f41-bc1f-226d0c2fa0e9", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724089, "uuid": "c69887a5-072d-4b02-a41f-859b28ac9ee8", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767724089, "uuid": "6e6e85f7-bfb3-4b6d-97cd-3dc1df261cf4", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1767724091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724091, "uuid": "e1706546-28f6-48c7-8fbf-20b1ea2d8022", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724091, "uuid": "8fae7210-ed6e-4e5b-b80b-51fdad12baef", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724091, "uuid": "eaca6473-a482-4d4a-a6a5-b8e42805f462", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724091, "uuid": "92583186-e81c-48d5-b986-4593b33953db", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767724091, "uuid": "d56d1b9e-b7e8-4c2a-bb16-06d96cc97eb8", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1767726668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726668, "uuid": "c37c21df-e406-4f7d-933b-33e5a700a5e3", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726668, "uuid": "f60c86ea-2550-42c1-a888-82104b4b1500", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1767726668, "uuid": "2c7d36b3-ab23-418b-a49c-b38240c0f7e9", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1767726668, "uuid": "82fa768a-0233-43c2-9b00-8458c1717a1a", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1767726668, "uuid": "8fb664ef-4c4f-4e41-8575-c289004b0150", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767657738, "uuid": "f76ef082-ea92-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.211:56157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767657855, "uuid": "3ceced07-ea93-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:48700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658087, "uuid": "c753078b-ea93-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.231.54:49359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658152, "uuid": "ee1fcef9-ea93-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.196.249:35234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658208, "uuid": "0fcfd3ad-ea94-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8276299418/wm8YwCC.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767658286, "uuid": "3e26f1ed-ea94-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.28.86:38867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659349, "uuid": "b7804d92-ea96-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.196.249:35234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659349, "uuid": "b7886e92-ea96-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.211:56157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659550, "uuid": "2f9dff89-ea97-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.128:34885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767659593, "uuid": "491896d7-ea97-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.231.54:49359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660067, "uuid": "63a1dd9e-ea98-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.78/bins/root", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660067, "uuid": "63adeac3-ea98-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.78/bins/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660068, "uuid": "6440a151-ea98-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.78/bins/frost.rtk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660068, "uuid": "644239e4-ea98-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.78/bins/frost.zte", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660072, "uuid": "66ac2d52-ea98-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.78/bins/frost.yarn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660610, "uuid": "a72ff6f7-ea99-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.77.175:46385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660914, "uuid": "5c9fed32-ea9a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.169.118:57345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767660976, "uuid": "814aee01-ea9a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.13.17:45657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661216, "uuid": "103f1dd9-ea9b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.128:34885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661216, "uuid": "10a468bc-ea9b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.179.156:49633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661636, "uuid": "0ab41cfe-ea9c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.2:38909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661692, "uuid": "2c6f13b7-ea9c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.34.60:60702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767661933, "uuid": "bb910dff-ea9c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.199.16:57950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662594, "uuid": "45f6bf31-ea9e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.13.17:45657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767662831, "uuid": "d2f29981-ea9e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.77.175:46385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663314, "uuid": "f31cc98a-ea9f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.29.179:54386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767663611, "uuid": "a3df4d6c-eaa0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.13:57946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664034, "uuid": "9fe752be-eaa1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.214.164:47065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664447, "uuid": "9673564a-eaa2-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.88.82:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767664871, "uuid": "9316b5b3-eaa3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.43.143:57949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665108, "uuid": "206d6c46-eaa4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.197:41683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665167, "uuid": "43365e08-eaa4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.13:57946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665408, "uuid": "d308677e-eaa4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.214.164:47065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665778, "uuid": "afd5b15d-eaa5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.220:60692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767665956, "uuid": "19d0729e-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.122:35384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666187, "uuid": "a34582de-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666187, "uuid": "a35d56b2-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666188, "uuid": "a3ea3158-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666188, "uuid": "a4069f6a-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666189, "uuid": "a4a4bd85-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666189, "uuid": "a4b948d3-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666189, "uuid": "a4bb4aff-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666189, "uuid": "a4d3ad25-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666190, "uuid": "a53046e5-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666192, "uuid": "a65895a2-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666195, "uuid": "a8055abb-eaa6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.60.237.59/bins/UnHAnaAW.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666434, "uuid": "36d1463d-eaa7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.9.52:32901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666553, "uuid": "7d57096c-eaa7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.15.104:47840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666554, "uuid": "7dd84186-eaa7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.148.74:43579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666738, "uuid": "ebe07e8e-eaa7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.121:54083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666786, "uuid": "08a5913b-eaa8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.197:41683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666916, "uuid": "55bf181f-eaa8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.178:50931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767666916, "uuid": "561f518e-eaa8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.130:54409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767667393, "uuid": "72426ff9-eaa9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.122:35384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767667573, "uuid": "dd78a5b9-eaa9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.220:60692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767667815, "uuid": "6d96b566-eaaa-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.114.245:53505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668228, "uuid": "63e02454-eaab-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.148.74:43579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668467, "uuid": "f277610d-eaab-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.192.33:43150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668467, "uuid": "f2938281-eaab-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.170:49013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668467, "uuid": "f2a4c99b-eaab-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-api-ls-key/7fnk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668469, "uuid": "f3d878c8-eaab-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:47291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668524, "uuid": "147a5601-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-180-set-api/put200", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668524, "uuid": "148770ee-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-180-set-api/tem41", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668525, "uuid": "15250359-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-210-so-api-ky/roj19", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668533, "uuid": "1992af6c-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.187.17.22:58193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668584, "uuid": "384f405d-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-250-cloude/tu20", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668584, "uuid": "3858619f-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-13-fd-cloude/sten47", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668593, "uuid": "3dc00b2a-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.46.143:42838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668644, "uuid": "5c049ece-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-250-cloude/tons25", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668644, "uuid": "5c21d556-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-250-cloude/pet12", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668913, "uuid": "fc48d973-eaac-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.193.97:58556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767668951, "uuid": "12e58719-eaad-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.130:54409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767669021, "uuid": "3c6ef89d-eaad-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.119.117:43244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767669209, "uuid": "ace1f8ef-eaad-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.215.79:48535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767669314, "uuid": "eb10bae1-eaad-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.8.240:33030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767669375, "uuid": "0f5cd3eb-eaae-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.105:54275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767669914, "uuid": "50992f22-eaaf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.247.114:39539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767670926, "uuid": "ac5226cf-eab1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6691015685/4rGzwwB.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767670988, "uuid": "d137babd-eab1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.8.240:33030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767671052, "uuid": "f73d1b46-eab1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.34.242:60110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767671053, "uuid": "f7bc7a37-eab1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.89.117:52065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767672074, "uuid": "580e4094-eab4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.19.113:38391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767672312, "uuid": "e6041117-eab4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.18:45737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767672426, "uuid": "2a4b3804-eab5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.94:40149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767672853, "uuid": "2885e3d8-eab6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.217:48790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767673454, "uuid": "8f0e5fc9-eab7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.19.113:38391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767673575, "uuid": "d6f8569f-eab7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.62.146:51300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767673575, "uuid": "d70dca11-eab7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.248.104:57364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767673932, "uuid": "ab9eba49-eab8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.94:40149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674067, "uuid": "fc0f5e88-eab8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.18:45737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674115, "uuid": "18acc736-eab9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.254.94:49437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674294, "uuid": "839640bc-eab9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.9.52:32901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674354, "uuid": "a776673e-eab9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.33.10:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674413, "uuid": "ca449c3d-eab9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.217:48790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674466, "uuid": "ea4b97ed-eab9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.241.239:45901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674529, "uuid": "0f9494c2-eaba-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.183.181:48097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674717, "uuid": "7f9fae3a-eaba-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.141.138:51050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767674826, "uuid": "c0c7f67b-eaba-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.0.148:52215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767675191, "uuid": "9a2442a5-eabb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.62.146:51300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767675375, "uuid": "079268d2-eabc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.152.48:47421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767675852, "uuid": "23e5cf3b-eabd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.56.221:33724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676152, "uuid": "d7239aee-eabd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.169.108:38990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676212, "uuid": "faaf7e95-eabd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.141.138:51050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676627, "uuid": "f255c1e8-eabe-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.162.170:40348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676747, "uuid": "3995b4f9-eabf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.57:43094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676868, "uuid": "81dd3491-eabf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.176/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676868, "uuid": "82024636-eabf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.176/mipseb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "821bf0e6-eabf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.176/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "821c2977-eabf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.176/k", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767676869, "uuid": "822df3a2-eabf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.176/arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677108, "uuid": "1100faab-eac0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://199.16.59.214:59376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677167, "uuid": "33e79a9e-eac0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.79.163:46833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677226, "uuid": "572d46f3-eac0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.168.204.221:33689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed0cd53-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed0f77b-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed340cd-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed5bc38-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed5bc3a-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed5d1ea-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed753c6-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed93c23-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677588, "uuid": "2ed94035-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677712, "uuid": "78ea0130-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.33.74:34390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677775, "uuid": "9e517e25-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.169.108:38990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767677895, "uuid": "e59d59e2-eac1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.162.170:40348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767678020, "uuid": "30a0a2c2-eac2-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.228.227:41496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767678376, "uuid": "04520dac-eac3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.87.160:42757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767678616, "uuid": "93d890b0-eac3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.210.234:36659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767678736, "uuid": "daf936d0-eac3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.79.163:46833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fad778d2-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadc7892-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadc7897-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadc8446-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadc9e40-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcafa1-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcb27e-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcb368-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcb6c8-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcb760-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcc105-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.ppc", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "fadcdc9c-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679219, "uuid": "faf42a75-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.108.82.16/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679220, "uuid": "fb7cc364-eac4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.52.91:39492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679325, "uuid": "3a715f1f-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/f9ONgDp.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679325, "uuid": "3a765651-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zxc4wewewe-cpu/sdfsdb/raw/refs/heads/main/svchost.exehttps://github.com/zxc4wewewe-cpu/sdfsdb/raw/refs/heads/main/svchost.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679326, "uuid": "3a9f8bc9-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/mfu1f5wn87q0d7ozj666r/rasiel-beta-x.exe?rlkey=pcagifeew1pzjszkkx8idt1y7&e=1&st=a4m2azbo&dl=1", "Tag": [ { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679388, "uuid": "5fecc4c8-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679388, "uuid": "5ff9f72d-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679388, "uuid": "60018314-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679388, "uuid": "60018a27-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679388, "uuid": "60018dfe-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679389, "uuid": "60394768-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679391, "uuid": "61bdfbca-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679392, "uuid": "625f078b-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679396, "uuid": "646dcac4-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679399, "uuid": "66510a67-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679401, "uuid": "67634265-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679401, "uuid": "6763464b-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679401, "uuid": "6777f62e-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://scivet.vet.ku.ac.th/bins/sora.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679574, "uuid": "cebfec51-eac5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.29:41233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "81bc19d7-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679874, "uuid": "81bf7210-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679875, "uuid": "81c6b40a-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679880, "uuid": "84d34e13-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "86459fcb-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "86585735-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "865f202c-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "8672f7e5-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "867dd41b-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/x/x.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "867ddd53-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679882, "uuid": "8681e8fa-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "8690694f-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86921ac1-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86931153-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86964317-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "8696f6f4-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86971c71-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/x/x.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "8698ac3b-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "8698d868-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/x/x.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "869d767d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "869d909a-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/x/x.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "869ffb70-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86a24492-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86a256d6-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86ae2372-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86aebd0d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86b34c83-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86b36b70-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86b51371-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86b53793-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679883, "uuid": "86bb1d0d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89b74044-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/x/x.aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89b7590a-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/x/x.aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89c2fd6d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89c611b7-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/x/x.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89c61e30-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/x/x.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89c7fa26-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679888, "uuid": "89ca11b4-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/x/x.aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679889, "uuid": "8a3a648d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679889, "uuid": "8a4c6fd3-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679890, "uuid": "8b2554e4-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679890, "uuid": "8b25585f-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679891, "uuid": "8bcc5223-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679891, "uuid": "8bcebd10-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679891, "uuid": "8bcebe48-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/x/x.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679893, "uuid": "8cba929d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/x/x.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8ee85f2f-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8ef3c6d3-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8ef66192-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8ef66d17-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8efad88e-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8efe1841-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8efe88df-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f008bef-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f00bef5-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f01d7a6-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f03795e-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f04d536-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f09d1da-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f12cd78-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f15de3d-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679897, "uuid": "8f16ee4c-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679898, "uuid": "90108d79-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679899, "uuid": "901da1cc-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/bins/skid.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679899, "uuid": "90354b00-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/x/x.aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679901, "uuid": "916a9156-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/bins/skid.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679901, "uuid": "91706b1e-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/x/x.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679901, "uuid": "9181722a-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679901, "uuid": "91957415-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/bins/skid.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767679901, "uuid": "919915dc-eac6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680838, "uuid": "c04cc32c-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/wc.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680840, "uuid": "c150a142-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/wc.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680840, "uuid": "c18a8df5-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680841, "uuid": "c1f20efb-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.87.160:42757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680843, "uuid": "c2ccf59c-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680843, "uuid": "c336f6b9-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/wc.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680843, "uuid": "c33b83bd-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.93.140:56655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "c364aa0d-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.198/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "c3655d06-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.52.91:39492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "c366908a-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/x.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "c3743b38-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/x.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "c3901744-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/x/x.aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680844, "uuid": "c3ad6b13-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.188:39306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680847, "uuid": "c5a846e5-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/x.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680847, "uuid": "c5af406f-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vm05.transportrrj.com/x.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680847, "uuid": "c5af43c9-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/x.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680847, "uuid": "c5b1d19d-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/bins/skid.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680847, "uuid": "c5b5d98b-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.pagar8.alphaville-bt.com/bins/skid.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680848, "uuid": "c5bf19be-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://pagar8.alphaville-bt.com/wc.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680848, "uuid": "c5bfee61-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://g3we2pj43ijkpfjmi.3utilities.com/wc.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680848, "uuid": "c6057631-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.vm05.transportrrj.com/x/x.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767680849, "uuid": "c6baec32-eac8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.157.63:40477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681142, "uuid": "757253bf-eac9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.29:41233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681207, "uuid": "9c250bb0-eac9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.82.43:54993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681248, "uuid": "b43279f7-eac9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.64:42226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681248, "uuid": "b443ce29-eac9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.219.196:36276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681857, "uuid": "1f896134-eacb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.188:39306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767681974, "uuid": "64fb7ee1-eacb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.93.140:56655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767682516, "uuid": "a7f16412-eacc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.80.113:37313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767682744, "uuid": "304cfa18-eacd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/update.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767682755, "uuid": "36e8b4c7-eacd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.29.141:52342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767682943, "uuid": "a6fc7f3d-eacd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.82.43:54993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767684195, "uuid": "90caeddb-ead0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.86.68:57511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767685222, "uuid": "f530b8e1-ead2-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.64:42226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767685746, "uuid": "2daf4f51-ead4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://biggbossteluguvote.com/BAD/AudioToastIcon.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767685876, "uuid": "7b2ab02b-ead4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.78:58771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767686109, "uuid": "05971656-ead5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.ilovegrooming.xyz/main.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767686116, "uuid": "09b72992-ead5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.50.227.155:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767686421, "uuid": "bf9b747d-ead5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.239:47581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767686661, "uuid": "4ea8bb4d-ead6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.32:44532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767687019, "uuid": "2407cdf6-ead7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.218.101:38295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767687079, "uuid": "481f61f6-ead7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.46.143:42838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767687315, "uuid": "d4bb95f3-ead7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.78:58771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767687379, "uuid": "fae32f27-ead7-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.92.210:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767687439, "uuid": "1ed8d677-ead8-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.159.170:47782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767687976, "uuid": "5e9f2868-ead9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.124:35877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688331, "uuid": "3206cf65-eada-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.32:44532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688926, "uuid": "94d21559-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dbjtzqp4q/image/upload/v1767455040/optimized_MSI_lpsd9p.jpg", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688928, "uuid": "965704b7-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://jutup.ydns.eu/ebuka2026ConvertedFile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688989, "uuid": "ba33b8d5-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.ilovegrooming.xyz/WSSecurity.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688989, "uuid": "ba446965-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.ilovegrooming.xyz/Realtek%20Audio%20Manager.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688990, "uuid": "baf00243-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.ilovegrooming.xyz/Update.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SparkRAT", "colour": "#21bb35", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767688999, "uuid": "c06ecf43-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.ilovegrooming.xyz/Discord.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689000, "uuid": "c0e9c821-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.ilovegrooming.xyz/krpc.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689049, "uuid": "de5e40b6-eadb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://jutup.ydns.eu/ConvertedFile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689109, "uuid": "0203e6b2-eadc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://cryptertyyu.42web.io/arquivo_20260106003657.txt", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689167, "uuid": "24a11df7-eadc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://jutup.ydns.eu/xworm2026dbConvertedFile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689226, "uuid": "47a11aa2-eadc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/spl.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689658, "uuid": "494e7eae-eadd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.73.115:35649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689709, "uuid": "6776087a-eadd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-cl0ud/sad", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767689836, "uuid": "b3624d6e-eadd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.162:40779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690077, "uuid": "43037915-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.48.212:56472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690077, "uuid": "431f0993-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:41222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690078, "uuid": "43783ffc-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.62.74:34320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690078, "uuid": "437ecfa6-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.108.88.177:50375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690130, "uuid": "6268f0b3-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:41222/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690195, "uuid": "89063293-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.146.234:50611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690198, "uuid": "8b1e25e2-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.68.59:40042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690245, "uuid": "a7521a0c-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-210-so-api-key/sash21", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690248, "uuid": "a8a217c8-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.37.4:37041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690255, "uuid": "acf4984d-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.50.153:55641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690255, "uuid": "ad4149e0-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.221.255.244:50754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690320, "uuid": "d3b6bd73-eade-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.228:49920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690497, "uuid": "3d6b1cb9-eadf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.48.239:40381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690557, "uuid": "60d4ff13-eadf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.124:35877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690667, "uuid": "a2dad9b6-eadf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.137.152:54774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767690786, "uuid": "e9ab59fe-eadf-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.73.115:35649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691273, "uuid": "0c14ec0c-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.196:42575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691336, "uuid": "3186321e-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.214.46:60429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691337, "uuid": "320b8302-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.122.116:47268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691570, "uuid": "bce8d715-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.242/bins/skid.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691570, "uuid": "bce8e356-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.242/bins/skid.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691574, "uuid": "bf376090-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.242/bins/skid.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767691575, "uuid": "bfebf005-eae1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.169.74:45493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692119, "uuid": "042acad0-eae3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.169.213:48631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692130, "uuid": "0a87b278-eae3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.139:57681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692425, "uuid": "ba4eacac-eae3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-8bf10830d4fa42d3a538fa7b302d55b3.r2.dev/whtfhtyhg%20(1).zip", "Tag": [ { "name": "Trojan:Win32/Wacatac.H!ml", "colour": "#9856c0", "exportable": true, "hide_tag": false }, { "name": "Wacatac", "colour": "#189036", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692540, "uuid": "ff4162f9-eae3-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.214.46:60429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692646, "uuid": "3e7737bb-eae4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.196:42575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767692778, "uuid": "8cc1f633-eae4-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.71.130:40072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767693017, "uuid": "1b15647a-eae5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.145:60669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767693136, "uuid": "62277867-eae5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.169.74:45493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767693137, "uuid": "62bafb17-eae5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.71.130:40072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767693548, "uuid": "57d15710-eae6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.178:40421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767693733, "uuid": "c609eb48-eae6-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.169.213:48631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767694807, "uuid": "466088ef-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.127.128:42020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767694807, "uuid": "46608aec-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.145:60669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695048, "uuid": "d5f91843-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://frepanlanral563.luxpost.shop/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695048, "uuid": "d60c0a37-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://progongor822.mail-genius.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695051, "uuid": "d7ddea4e-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://crical.mail-craft.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d832ebb0-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://glasal.luxmail.space/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d843044e-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://frukinvel.luxmailer.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d8643502-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cropenval8.mail-lab.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d86ccded-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://flononconsal.mail-genius.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d872ad7a-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://glaronhal.lxmail.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d879d8bf-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://flipinlanjal.mail-cube.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d87e92bc-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://crolinpanrol.luxmailing.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d87e97fa-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://pripingor.mail-boss.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d87e9973-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://prukinsandiz41.luxmailing.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695052, "uuid": "d87e9e31-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://prosil.mail-mentor.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695053, "uuid": "d89586fa-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://glejal.mail-craft.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695053, "uuid": "d8a50b71-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cretonriz.lxmail.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695053, "uuid": "d8d06f2c-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://glefenbonder.luxomail.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695053, "uuid": "d8d07875-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://platum.luxxmail.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695053, "uuid": "d8e5b210-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://prorol638.luxormail.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "MEX", "colour": "#faf3b8", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695054, "uuid": "d9910f84-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://flisinfuntar.mail-lab.store/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695116, "uuid": "fe8b70fe-eae9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.178:40421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767695167, "uuid": "1ce321a5-eaea-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://expressinvoicesinvoice27.ngrok.pro/invoiceservice1.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696190, "uuid": "7ebbe211-eaec-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.54.161:35342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696250, "uuid": "a2716644-eaec-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.127.128:42020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696375, "uuid": "ed157f11-eaec-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.176.142:39675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696376, "uuid": "ed5ce1c8-eaec-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.247.225:34398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767696759, "uuid": "d18c2b5d-eaed-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.74:45942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767697399, "uuid": "4f0fbf51-eaef-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.254.94:49437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767697817, "uuid": "480d1075-eaf0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.247.225:34398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767698055, "uuid": "d64f7248-eaf0-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.176.142:39675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767698357, "uuid": "8a239fbe-eaf1-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.74:45942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767700038, "uuid": "74686f6c-eaf5-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.248:33575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767701778, "uuid": "81576de1-eaf9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.226.52:58632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767701950, "uuid": "e7e8ea28-eaf9-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.18.105:54806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702806, "uuid": "e6300d0e-eafb-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.186.212:60392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702967, "uuid": "45b94de6-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/all.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702975, "uuid": "4a762c19-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.34.242:60110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767702981, "uuid": "4e1fcd7f-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.189.153.65:10001/SgrmPath.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "903270fc-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "90337bed-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "903af502-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "903b22cd-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "903b6f1c-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "903d2a14-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "9040bd57-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703092, "uuid": "90425ce5-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "92511851-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "92511b14-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "92512754-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "925128d4-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703095, "uuid": "9251504c-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703157, "uuid": "b770df38-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703209, "uuid": "d663538d-eafc-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.114.169/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703397, "uuid": "463a8887-eafd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.18.105:54806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767703400, "uuid": "481ed989-eafd-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.249.3:35127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704300, "uuid": "60c7ff06-eaff-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.206.175:56173/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704301, "uuid": "60fc033b-eaff-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.109.32:57096/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704301, "uuid": "611697b1-eaff-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.130.112:56568/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704301, "uuid": "61170bff-eaff-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.130.112:56568/bin.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704301, "uuid": "61561481-eaff-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.206.175:56173/bin.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704361, "uuid": "84b32e82-eaff-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.45:49703/bin.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704662, "uuid": "382a1a5f-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.169.107.17:48034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704827, "uuid": "9a9debfa-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://youtubefromrussia.lol/YouTubeRU.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704829, "uuid": "9bdf9631-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://newnube.lol/YTnew.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704831, "uuid": "9ce03f3b-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://helpdps.space/assets/%D0%A0%D0%B0%D0%B4%D0%B0%D1%80%20%D0%94%D0%9F%D0%A1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704836, "uuid": "a03bfc14-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.97.90:40266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704887, "uuid": "be915362-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://drivepro.lol/DrivePro.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767704888, "uuid": "bf2ebe80-eb00-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://youtube-russ.lol/YouTubeRU.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705024, "uuid": "100366bc-eb01-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.117.58:35313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705310, "uuid": "ba6d8f04-eb01-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:54985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705312, "uuid": "bbed0da2-eb01-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.you-rus.lol/YouTubeRU.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "4ecd08aa-eb02-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.193.126.158:8081/download/x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "4ecd1558-eb02-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.193.126.158:8081/download/x65", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705559, "uuid": "4effbf48-eb02-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.193.126.158:8081/download/x99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705560, "uuid": "4f39fd61-eb02-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.193.126.158:8081/download/sysad", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767705681, "uuid": "97e84958-eb02-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.124.41:50076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706088, "uuid": "8a62f0ec-eb03-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.86:35949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706089, "uuid": "8ad6d033-eb03-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.219.136:57087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706162, "uuid": "b60f8d20-eb03-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:54985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706396, "uuid": "42055799-eb04-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.97.90:40266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706396, "uuid": "4205663e-eb04-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.208:38888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706519, "uuid": "8af81b22-eb04-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.76:45869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706519, "uuid": "8b2877fa-eb04-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.117.58:35313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767706928, "uuid": "7ec4e21d-eb05-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7311893838/7BatRta.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707050, "uuid": "c7d89c81-eb05-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.226:55185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707241, "uuid": "394dbd47-eb06-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.83.120:35080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707718, "uuid": "5603d3a7-eb07-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.208:38888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707771, "uuid": "7534b2ed-eb07-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.86:35949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707834, "uuid": "9b1f53c1-eb07-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.219.136:57087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767707885, "uuid": "b973daaa-eb07-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s15-ap-k/nol45", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708138, "uuid": "5029faf3-eb08-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.211:37281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708500, "uuid": "27ee711f-eb09-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.226:55185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708975, "uuid": "42f9dd9a-eb0a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.83.224:45080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767708982, "uuid": "4738e551-eb0a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.83.120:35080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709035, "uuid": "66e894f9-eb0a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.232.167:36509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709447, "uuid": "5ca5176e-eb0b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s15-ap-k/yo100", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709520, "uuid": "87e81e34-eb0b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.84.18:44995/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709520, "uuid": "87f8ac2e-eb0b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.69.216:33516/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709758, "uuid": "15e4bc8d-eb0c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.81.13:46127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709820, "uuid": "3ad44c40-eb0c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.211:37281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767709986, "uuid": "9db0ffdf-eb0c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8089806195/kKMMRkd.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710108, "uuid": "e69931c6-eb0c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s15-ap-k/set29", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710287, "uuid": "50f35275-eb0d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/946643047/9H6uXXT.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710464, "uuid": "bab6ae40-eb0d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-300-s46-k127/pm45", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710842, "uuid": "9becbf0e-eb0e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.232.167:36509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767710842, "uuid": "9bfcb0f9-eb0e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.83.224:45080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711139, "uuid": "4d17e7b0-eb0f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.228:49920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711521, "uuid": "308bc629-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.30.61:44820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711678, "uuid": "8e3f1e52-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.108.92:46937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711678, "uuid": "8e69a5f9-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.61:55998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711738, "uuid": "b19cd75b-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.85.91:35698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711738, "uuid": "b20305a8-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.99.51:50652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711741, "uuid": "b3876095-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.183.85.228:48167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711743, "uuid": "b4b89bb3-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.78.189:34200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711746, "uuid": "b680eadb-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.75.198:48207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711798, "uuid": "d595e108-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.76:45869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711798, "uuid": "d5a4e9d7-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.40.83:40246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711799, "uuid": "d68b02f5-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.15.36:59872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711856, "uuid": "f81e32cc-eb10-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.93.63:46143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711912, "uuid": "198b4fe6-eb11-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7983541316/wB4Hbjy.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767711912, "uuid": "19cf5c63-eb11-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7449711934/Z29uFrq.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712086, "uuid": "8140d8fb-eb11-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-300-s46-k127/70op", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712167, "uuid": "b161899c-eb11-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.179.30:33068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712385, "uuid": "33ce9469-eb12-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-200-fd-cloudi/gds10", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712697, "uuid": "edbfab82-eb12-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.44.29:53597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712877, "uuid": "589fb639-eb13-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.75.198:48207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712943, "uuid": "7fd4be42-eb13-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.30.61:44820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767712943, "uuid": "80204476-eb13-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.34.69:42869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713059, "uuid": "c4fd4801-eb13-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.9.81:33233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713288, "uuid": "4dc6d735-eb14-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.97.165:60344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713351, "uuid": "73548471-eb14-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://grufuncinlhar.floresflorcravovermelho.cfd/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "jse", "colour": "#210cee", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713588, "uuid": "0061d044-eb15-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7467956971/bgIzcNk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713598, "uuid": "066812f6-eb15-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.179.30:33068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713607, "uuid": "0bea386d-eb15-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.94.58.172/bins/loligang.mips", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767713659, "uuid": "2b29affb-eb15-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.144.107:39845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714075, "uuid": "2305e79a-eb16-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.121:38321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714320, "uuid": "b4e2f051-eb16-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.23:48191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714381, "uuid": "d9434d58-eb16-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.57.7:34221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714618, "uuid": "66ae8690-eb17-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.44.29:53597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767714920, "uuid": "1a6e50f8-eb18-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.247.136:45112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715098, "uuid": "8496e90b-eb18-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.11.196:50532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715751, "uuid": "09c41c0e-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://barandis.sbs/TikTok18.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715803, "uuid": "28fce842-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://tokityki.shop/TikTok18.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715803, "uuid": "2915d4ed-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://robinjsb.sbs/TikTok18.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715821, "uuid": "33b1e7f8-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.246.88:39257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767715927, "uuid": "72d35a8a-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.200.55:44958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716055, "uuid": "becbfd44-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.89.234:37489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716120, "uuid": "e5a4ae20-eb1a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.205.142:57084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716477, "uuid": "ba6c1a5a-eb1b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.130.124:40366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716714, "uuid": "47f7a6cb-eb1c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.23:48191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716787, "uuid": "737ffd47-eb1c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.57.7:34221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767716948, "uuid": "d34f7b9f-eb1c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/l89Sfic.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767717079, "uuid": "212a7553-eb1d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.66.192:38531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767717200, "uuid": "69952df4-eb1d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.89.234:37489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767717200, "uuid": "699533af-eb1d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.48.239:40381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767717500, "uuid": "1c830675-eb1e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.200.55:44958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767718098, "uuid": "80e730bf-eb1f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.205.142:57084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767718987, "uuid": "92cc6315-eb21-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.110.124:47390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767719471, "uuid": "b31d8810-eb22-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.98.236:50756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720139, "uuid": "416bfbc8-eb24-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:55778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720142, "uuid": "431b5acd-eb24-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.174.92.184:13394/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720678, "uuid": "82a089c7-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.120.179:47450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a16b9b64-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a17168f5-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a1725e0d-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a179cda4-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a179e1cd-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a182d9c7-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a187f179-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720730, "uuid": "a193e248-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720736, "uuid": "a537302c-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720736, "uuid": "a542378e-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720797, "uuid": "c94295af-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720857, "uuid": "ecfc998f-eb25-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767720919, "uuid": "122fea81-eb26-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.112.157/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721036, "uuid": "582b12c2-eb26-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.56:50995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721037, "uuid": "585018f2-eb26-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.227.200:54078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721155, "uuid": "9f0d06b5-eb26-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.227.200:54078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721456, "uuid": "528133e5-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.132.186:50071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721632, "uuid": "bb28810b-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.17.155:35533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721687, "uuid": "dbb54d8e-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://exodus-io.io/exodus.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721687, "uuid": "dc1f7cf8-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://vetervsn.sbs/TikTok18.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721687, "uuid": "dc3f5773-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://tokistuku.shop/TikTok18.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721687, "uuid": "dc3f65c6-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudy-verification.com/cloudfa", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721690, "uuid": "dd8ed252-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8042875554/spYZBf7.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721702, "uuid": "e4d0a4fe-eb27-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://helpdps.site/assets/%D0%A0%D0%B0%D0%B4%D0%B0%D1%80%20%D0%94%D0%9F%D0%A1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721748, "uuid": "0059ea86-eb28-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://hehejj.shop/TikTok18.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767721994, "uuid": "930bba05-eb28-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.79.114:33642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767722234, "uuid": "223f456d-eb29-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.2.110:38101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767722291, "uuid": "43e99590-eb29-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.56:50995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767722407, "uuid": "88e1a9d7-eb29-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-210-so-ap20-s01/bep10", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767722649, "uuid": "195493a7-eb2a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.125.73:53738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767722956, "uuid": "d01c7cda-eb2a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.76.58:47618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723131, "uuid": "388f013f-eb2b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7449711934/EsSLuZk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723245, "uuid": "7c7f59ea-eb2b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-300-s01-k17/eno80", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723254, "uuid": "82145c13-eb2b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-e306adc6127c4521869ba034f1b34502.r2.dev/EnterpriseElectricalReview.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723432, "uuid": "ec00f1df-eb2b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.167.207:51328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723434, "uuid": "ed83d1a1-eb2b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.159.44:39754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723548, "uuid": "316efff9-eb2c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.103.129:60585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723548, "uuid": "317532d7-eb2c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.64.192:38806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767723966, "uuid": "2a5e908d-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s80-ap-k56/eut11", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724089, "uuid": "73e93095-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.165.148:23209/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724089, "uuid": "73f13d66-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.55.251.22/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724089, "uuid": "73f23559-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.120.34:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724090, "uuid": "74235994-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.110.173:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724090, "uuid": "74872bfa-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.33.19:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724091, "uuid": "74d4b623-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.165.78:12958/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724091, "uuid": "75111230-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.179.152.235:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724092, "uuid": "758cc96b-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.101.40.118:15433/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724095, "uuid": "772de502-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.30.156.21:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724095, "uuid": "773ad745-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.30.156.21:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724095, "uuid": "777bade0-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.15.112.45:37654/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724101, "uuid": "7adf614d-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.33.19:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724102, "uuid": "7b6c808c-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.207.144.126:34930/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724103, "uuid": "7bf43ca0-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.37.238:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724104, "uuid": "7c8c7b3b-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.239.213.91:52200/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724146, "uuid": "957c970a-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.243.238.194:54188/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724157, "uuid": "9c23f89b-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.17.155:35533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724158, "uuid": "9cd80399-eb2d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.172:38101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724581, "uuid": "9931c546-eb2e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.226:39218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724631, "uuid": "b6c842bb-eb2e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.167.207:51328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724631, "uuid": "b6d69345-eb2e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.76.58:47618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724632, "uuid": "b70855ff-eb2e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:55778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724822, "uuid": "28b09f16-eb2f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.103.129:60585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724940, "uuid": "6ee1776c-eb2f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.186.61:35330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767724940, "uuid": "6ee90c48-eb2f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.159.44:39754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725122, "uuid": "db1b17f3-eb2f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.64.192:38806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725122, "uuid": "db94df67-eb2f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.165.84:52149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725131, "uuid": "e0de009b-eb2f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.125.73:53738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725237, "uuid": "2025ba28-eb30-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.209.141:42107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725299, "uuid": "45149399-eb30-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.31.118.136:32787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725597, "uuid": "f6acdf5f-eb30-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.172:38101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725674, "uuid": "2449717f-eb31-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.191.32:47810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767725914, "uuid": "b342eaa2-eb31-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.226:39218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726253, "uuid": "7db84185-eb32-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.191.32:47810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726254, "uuid": "7e2b71eb-eb32-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.209.13:52360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726319, "uuid": "a4d60bb1-eb32-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.50.153:55641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726372, "uuid": "c46ca14a-eb32-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.186.61:35330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726612, "uuid": "5374fbeb-eb33-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.113.32:51838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726669, "uuid": "7540f06a-eb33-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.230.58:34632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767726731, "uuid": "9a5cfb3f-eb33-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:37349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767727038, "uuid": "51509be5-eb34-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.209.141:42107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767727212, "uuid": "b901dc5f-eb34-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.91.87/download/protection.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767727269, "uuid": "dadfdb46-eb34-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1660276343/Wnp3t9q.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767727820, "uuid": "23a53da7-eb36-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.230.58:34632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767727821, "uuid": "2405e48b-eb36-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.86:48807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767728058, "uuid": "b151341b-eb36-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:37349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767728059, "uuid": "b219dc9d-eb36-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.111:36929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767728901, "uuid": "a7b4f497-eb38-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.31.118.136:32787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767728902, "uuid": "a8b83893-eb38-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.174.140:47403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767729676, "uuid": "75b09b1f-eb3a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.111:36929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767729797, "uuid": "bdd31dcb-eb3a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.153.52:57094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767730158, "uuid": "955485c9-eb3b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.159.160:50619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767730519, "uuid": "6c3ab2dc-eb3c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.174.140:47403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767730580, "uuid": "909dc306-eb3c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.99:50541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767730639, "uuid": "b3f0ffc4-eb3c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.186.216:41426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767731477, "uuid": "a74680ec-eb3e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.155.46:37688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767731649, "uuid": "0db0c996-eb3f-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:47291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767732255, "uuid": "76afd4da-eb40-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.122:42119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767732255, "uuid": "771fc578-eb40-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.126.205:57238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767732440, "uuid": "e544cdb6-eb40-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.186.216:41426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767732486, "uuid": "0062dcd8-eb41-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5407123006/rU4ptB6.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767732613, "uuid": "4c5cf0a8-eb41-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.25.96:36094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767732736, "uuid": "9566117b-eb41-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.88.228:52481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733275, "uuid": "d6db45ed-eb42-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.16.78:50016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733337, "uuid": "fbc3827d-eb42-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.150.138:50463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733337, "uuid": "fc0b6548-eb42-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.187.17.22:58193/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733337, "uuid": "fc108b22-eb42-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.108.88.177:50375/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733338, "uuid": "fc6b731e-eb42-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.174.18:38876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733396, "uuid": "1ed06d33-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.110.110:48832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733396, "uuid": "1ee13750-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.41.7:52723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733401, "uuid": "21ddbb6b-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.36.164:59889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733409, "uuid": "26bc42bd-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.199.127:42984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733411, "uuid": "2819db1c-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.57.125:38018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733627, "uuid": "a877dc4b-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-api-1key/dash", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733627, "uuid": "a882aa68-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-cl0ud/dash", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733753, "uuid": "f3f1eb64-eb43-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.25.96:36094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733926, "uuid": "5ae0874a-eb44-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/VGByM5O.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767733937, "uuid": "61588ccb-eb44-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.22.24:58696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734056, "uuid": "a85b5d78-eb44-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.126.205:57238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734296, "uuid": "3755eeef-eb45-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.120.50:44444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734356, "uuid": "5b8b5011-eb45-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.82:43946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734357, "uuid": "5b9c8144-eb45-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.122:42119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734410, "uuid": "7b4bce5c-eb45-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.20:36695/aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734533, "uuid": "c4efc35c-eb45-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.229.60.159:58639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734660, "uuid": "1089b3f5-eb46-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.37:41502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767734888, "uuid": "9895126e-eb46-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1212303978/Oz1zHIP.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767735308, "uuid": "92f2661b-eb47-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.37:41502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767735429, "uuid": "daa303f5-eb47-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.69.216:33516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767735734, "uuid": "909fe4db-eb48-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.22.24:58696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767735977, "uuid": "21852d88-eb49-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.120.50:44444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767736035, "uuid": "43ec9bda-eb49-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.190.73:50341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767736989, "uuid": "7cdc0d83-eb4b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.76.119:35988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767737057, "uuid": "a52d4e4d-eb4b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.26.5:39682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767737596, "uuid": "e66a6a74-eb4c-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.190.73:50341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767737718, "uuid": "2f759b6a-eb4d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.0.96:55161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767737837, "uuid": "7633f665-eb4d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.135.145:53293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767738011, "uuid": "dd98bdeb-eb4d-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.153.227:43020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767738196, "uuid": "4bcc4a08-eb4e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.3.26:43184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767738310, "uuid": "902ca03f-eb4e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7044575709/fWaWLIo.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767738394, "uuid": "c2454c3d-eb4e-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.26.5:39682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767739461, "uuid": "3e0fc7aa-eb51-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.22.176:58886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767739577, "uuid": "836a87e1-eb51-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.82.0:52249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767740118, "uuid": "c5939d1e-eb52-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.3.26:43184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767740475, "uuid": "9aa38f30-eb53-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.114.105:51709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767740895, "uuid": "94d71380-eb54-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.113.6:38778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767740956, "uuid": "b94abd12-eb54-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.22.176:58886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767741137, "uuid": "2530e016-eb55-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.82.0:52249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767741433, "uuid": "d5585d89-eb55-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.124.242:38752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767741517, "uuid": "076fba1e-eb56-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.172.49:60497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767741930, "uuid": "fd70962e-eb56-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.65:43322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767742094, "uuid": "5fb97e34-eb57-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.234.147:45262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767742095, "uuid": "60098b8d-eb57-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.98.59:40076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767742328, "uuid": "eb2df516-eb57-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.113.6:38778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767742696, "uuid": "c6165421-eb58-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.172.49:60497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767742757, "uuid": "ea5e204c-eb58-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.241:51145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767742757, "uuid": "ea6b965d-eb58-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.124.242:38752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767743121, "uuid": "c35a4051-eb59-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.158.115:57743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767743416, "uuid": "7371b1ac-eb5a-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.39.225:56138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767743709, "uuid": "22101875-eb5b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.240.240:55411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1767743777, "uuid": "4a6b597f-eb5b-11f0-8990-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.234.147:45262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767730565, "uuid": "8788cfaa-eb3c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.104.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680825, "uuid": "b8733189-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.120.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767732245, "uuid": "70e67059-eb40-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.126.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721624, "uuid": "b678d9aa-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.17.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767673565, "uuid": "d0b67ae0-eab7-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.62.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767672844, "uuid": "237552a4-eab6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.97.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711725, "uuid": "aa46ae5e-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.99.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767725645, "uuid": "12e86a32-eb31-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.191.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767714365, "uuid": "cfd0b460-eb16-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.57.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767738006, "uuid": "da96bbd3-eb4d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.153.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767743406, "uuid": "6d5be2cb-eb5a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.39.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692765, "uuid": "85160d22-eae4-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.71.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767663606, "uuid": "a0da96af-eaa0-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.162.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767742084, "uuid": "599de189-eb57-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.234.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767673565, "uuid": "d0b6a4fc-eab7-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.248.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723545, "uuid": "2f709fe3-eb2c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.103.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711784, "uuid": "cd7dec02-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.15.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767736025, "uuid": "3dddc9d2-eb49-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.190.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723425, "uuid": "e7b10311-eb2b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.167.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767701765, "uuid": "7981cce7-eaf9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.226.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767712686, "uuid": "e6bed798-eb12-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.44.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679206, "uuid": "f31d73c6-eac4-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.52.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767740464, "uuid": "94045760-eb53-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.114.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690184, "uuid": "82dd3b51-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.68.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709506, "uuid": "7f7af9d3-eb0b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.69.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704284, "uuid": "572a4df8-eaff-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.206.175", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767669905, "uuid": "4b4dba00-eaaf-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.247.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713285, "uuid": "4c114908-eb14-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.97.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767674706, "uuid": "79194cf2-eaba-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.141.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709506, "uuid": "7f7ae03c-eb0b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.84.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661207, "uuid": "0ae47f8c-ea9b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.179.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680825, "uuid": "b8814606-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.93.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767696724, "uuid": "bcd22ff2-eaed-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767741484, "uuid": "f41f0c2c-eb55-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.172.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711485, "uuid": "1affab2c-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.30.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660964, "uuid": "7a6eb058-ea9a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.13.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767722225, "uuid": "1c5abfe5-eb29-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.2.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767668884, "uuid": "eac3b572-eaac-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.193.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767659525, "uuid": "2048d867-ea97-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.59.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767736985, "uuid": "7a02ec1a-eb4b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.76.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767730145, "uuid": "8d0ac6a6-eb3b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.159.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711725, "uuid": "aa46a1f9-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.75.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690306, "uuid": "cb31476b-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.252.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666424, "uuid": "30a2cc2b-eaa7-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.9.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724143, "uuid": "93f53bcc-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.240.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767693544, "uuid": "555eebed-eae6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.243.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767691325, "uuid": "2ac391c8-eae1-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.214.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a52da0-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.37.238", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767671043, "uuid": "f1a60b94-eab1-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.89.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767669306, "uuid": "e65bf89c-eaad-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.8.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767678006, "uuid": "27f34a02-eac2-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.228.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767686645, "uuid": "454f5e8a-ead6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.131.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711664, "uuid": "85cbb291-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.108.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767743107, "uuid": "bb0617e2-eb59-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.158.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733384, "uuid": "17eb113b-eb43-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.134.57.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767668944, "uuid": "0e801a7d-eaad-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.119.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767741424, "uuid": "d00d5e94-eb55-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.124.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681184, "uuid": "8e70d8a2-eac9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.82.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a4b170-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.110.173", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a4c9df-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.120.34", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666544, "uuid": "7815b821-eaa7-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.148.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709025, "uuid": "60b11c2a-eb0a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.232.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713645, "uuid": "2247e92e-eb15-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.144.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708125, "uuid": "4850e076-eb08-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.184.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767676624, "uuid": "f086325e-eabe-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.162.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692105, "uuid": "fbea3ab3-eae2-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.169.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767738185, "uuid": "454895a2-eb4e-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.3.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704824, "uuid": "98ec2f31-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.97.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705005, "uuid": "04cf5457-eb01-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.117.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690245, "uuid": "a70467b1-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.37.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767726244, "uuid": "780ca82d-eb32-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.209.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690484, "uuid": "35a69d54-eadf-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.48.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713584, "uuid": "fe5c33ca-eb14-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.94.58.172", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a5b7a0-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.179.152.235", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767727206, "uuid": "b551e753-eb34-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.91.87", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a7a158-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.15.112.45", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679206, "uuid": "f31ac9d0-eac4-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.108.82.16", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767716107, "uuid": "ddd23955-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.205.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767680825, "uuid": "b871366b-eac8-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.157.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767687424, "uuid": "15557e87-ead8-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.159.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660605, "uuid": "a46c387d-ea99-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.77.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767722644, "uuid": "16656e0a-eb2a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.125.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692105, "uuid": "fbeaeb6d-eae2-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767684186, "uuid": "8b804757-ead0-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.86.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767687365, "uuid": "f2871850-ead7-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.92.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720665, "uuid": "7acd7c18-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.120.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767707224, "uuid": "2f275cda-eb06-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.83.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767678364, "uuid": "fd5e5cb5-eac2-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.87.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767674105, "uuid": "12b04894-eab9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.254.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a41180-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.101.40.118", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a4b3e0-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.55.251.22", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658264, "uuid": "30e98834-ea94-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.28.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679565, "uuid": "c90b2051-eac5-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.29.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767716463, "uuid": "b236dc8b-eb1b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.130.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767727806, "uuid": "1b3cb45a-eb36-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.119.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733924, "uuid": "59edf0af-eb44-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.22.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733384, "uuid": "17eb009e-eb43-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.36.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767712146, "uuid": "a4cb5440-eb11-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.179.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733384, "uuid": "17eb0d5b-eb43-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.110.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767706084, "uuid": "87eb11a6-eb03-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.219.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767717065, "uuid": "18d4867f-eb1d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.66.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767708965, "uuid": "3ce228f8-eb0a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.83.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690245, "uuid": "a7051e79-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.221.255.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a3f8e3-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.207.144.126", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a3dff5-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.30.156.21", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711725, "uuid": "aa499db7-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.183.85.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767719464, "uuid": "af2af8fb-eb22-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.98.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767686106, "uuid": "03ffd1f8-ead5-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.50.227.155", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767674524, "uuid": "0cc7cc07-eaba-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.183.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767674824, "uuid": "bf2c1eb2-eaba-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.0.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767728885, "uuid": "9e5d2419-eb38-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.174.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723545, "uuid": "2f709078-eb2c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.64.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733324, "uuid": "f40e3097-eb42-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.174.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767734647, "uuid": "08bff8ae-eb46-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.17.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767672064, "uuid": "5250f4f5-eab4-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.19.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767725225, "uuid": "187e176d-eb30-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.209.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711844, "uuid": "f12f69f4-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.93.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767658084, "uuid": "c56d108d-ea93-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.231.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702785, "uuid": "d9c68559-eafb-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.186.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767734285, "uuid": "30fbfaf3-eb45-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.120.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a5698c-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.165.148", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767718985, "uuid": "9139f181-eb21-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.110.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767669185, "uuid": "9e1b6382-eaad-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.215.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767674344, "uuid": "a1398c01-eab9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.33.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677705, "uuid": "74715d0b-eac1-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.33.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666906, "uuid": "4fd6223d-eaa8-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.63.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767664444, "uuid": "948c4586-eaa2-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.88.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767677224, "uuid": "55f01cb8-eac0-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.168.204.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767725285, "uuid": "3c4fd8c5-eb30-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.31.118.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689645, "uuid": "415112e5-eadd-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.187.73.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767709745, "uuid": "0dcf382d-eb0c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.86.81.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661624, "uuid": "037b998c-ea9c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.151.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767730624, "uuid": "aabb4617-eb3c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.186.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a3c514-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.33.19", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705665, "uuid": "8e4f5887-eb02-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.124.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690184, "uuid": "82dd7053-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.146.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767682744, "uuid": "302ff18c-eacd-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.29.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767740884, "uuid": "8e305dcb-eb54-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.113.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767675364, "uuid": "013364e4-eabc-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.152.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767681245, "uuid": "b297d6ea-eac9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.219.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767665945, "uuid": "130463b9-eaa6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.244.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733384, "uuid": "17eabf77-eb43-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.41.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767729785, "uuid": "b6a1086b-eb3a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.153.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767661924, "uuid": "b6b2710d-ea9c-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.199.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715925, "uuid": "71467eff-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.200.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690065, "uuid": "3bba31d0-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.62.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767726665, "uuid": "72f157ce-eb33-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.230.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767742084, "uuid": "599dcbcc-eb57-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.98.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767725105, "uuid": "d13c73ff-eb2f-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.165.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767660905, "uuid": "56cc4d68-ea9a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.169.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690664, "uuid": "a09fead0-eadf-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.137.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767696364, "uuid": "e6657126-eaec-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.247.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767667806, "uuid": "681a8d30-eaaa-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.114.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767737044, "uuid": "9d495c72-eb4b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.26.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767716044, "uuid": "b8b97643-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.89.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767691325, "uuid": "2ac37167-eae1-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.122.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767696364, "uuid": "e665549d-eaec-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.176.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713046, "uuid": "bdaf302e-eb13-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.9.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721025, "uuid": "5121600b-eb26-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.227.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767733384, "uuid": "17eb39f7-eb43-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.199.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767671043, "uuid": "f1a69607-eab1-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.34.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a68ed0-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.236.165.78", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724143, "uuid": "93f57b09-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.243.238.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767724084, "uuid": "70a52140-eb2d-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.239.213.91", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767657724, "uuid": "eed680b5-ea92-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.76.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767714306, "uuid": "acb6ffa4-eb16-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767711725, "uuid": "aa46ad4f-eb10-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.78.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666724, "uuid": "e35da65a-eaa7-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767669365, "uuid": "096fc8be-eaae-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.182.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767687965, "uuid": "57f00283-ead9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723425, "uuid": "e7b0ffe5-eb2b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.159.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767666183, "uuid": "a13f6b12-eaa6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.60.237.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767690065, "uuid": "3bba433e-eade-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.108.88.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767702965, "uuid": "44e2d90b-eafc-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.189.153.65", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720125, "uuid": "38a86d6b-eb24-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.174.92.184", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1767720725, "uuid": "9ea8c4d1-eb25-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.112.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715747, "uuid": "07b6ed94-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "barandis.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767685745, "uuid": "2ca06a6b-ead4-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "biggbossteluguvote.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721685, "uuid": "da9f43e1-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudy-verification.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3b1664d-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "cretonriz.lxmail.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3aec695-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "crical.mail-craft.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3cec59f-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "crolinpanrol.luxmailing.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3bf9b3c-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "cropenval8.mail-lab.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767689107, "uuid": "008da410-eadc-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryptertyyu.42web.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767686107, "uuid": "0458e2d7-ead5-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.ilovegrooming.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704885, "uuid": "bd4bb3ea-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "drivepro.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721685, "uuid": "daa09905-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "exodus-io.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695166, "uuid": "1c5c4263-eaea-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "expressinvoicesinvoice27.ngrok.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3c211b8-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "flipinlanjal.mail-cube.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3b4581e-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "flisinfuntar.mail-lab.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3e212f5-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "flononconsal.mail-genius.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3accb2e-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "frepanlanral563.luxpost.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3b429ae-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "frukinvel.luxmailer.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3c1f9d0-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "glaronhal.lxmail.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3af77aa-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "glasal.luxmail.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3df720d-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "glefenbonder.luxomail.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3db5c1a-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "glejal.mail-craft.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767713347, "uuid": "7128d71f-eb14-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "grufuncinlhar.floresflorcravovermelho.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721685, "uuid": "daa1017c-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "hehejj.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721685, "uuid": "dae717a2-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "helpdps.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704826, "uuid": "9a449933-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "helpdps.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767688925, "uuid": "941f058d-eadb-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "jutup.ydns.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679865, "uuid": "7c604dd4-eac6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.pagar8.alphaville-bt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679865, "uuid": "7c5b2157-eac6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.vm05.transportrrj.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704827, "uuid": "9ab6ac30-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "newnube.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679865, "uuid": "7c58b219-eac6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "pagar8.alphaville-bt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3d4343d-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "platum.luxxmail.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3d35e72-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "pripingor.mail-boss.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695044, "uuid": "d3ae29e6-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "progongor822.mail-genius.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3e1e379-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "prorol638.luxormail.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3d73d02-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "prosil.mail-mentor.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767695045, "uuid": "d3e21d4c-eae9-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "prukinsandiz41.luxmailing.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767692410, "uuid": "b1869c6e-eae3-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-8bf10830d4fa42d3a538fa7b302d55b3.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767723250, "uuid": "7f7dca4c-eb2b-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-e306adc6127c4521869ba034f1b34502.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715745, "uuid": "062fb685-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "robinjsb.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679385, "uuid": "5deb0695-eac5-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "scivet.vet.ku.ac.th" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721685, "uuid": "da8c0b6d-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "tokistuku.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767715745, "uuid": "06202960-eb1a-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "tokityki.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767721685, "uuid": "da87ac16-eb27-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "vetervsn.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767679866, "uuid": "7c6b73e7-eac6-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "vm05.transportrrj.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767705308, "uuid": "b90a103c-eb01-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.you-rus.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704885, "uuid": "bd67143b-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "youtube-russ.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1767704824, "uuid": "99133cd8-eb00-11f0-8990-82aee05be84a", "comment": "Malware payload delivery host", "value": "youtubefromrussia.lol" } ] } }