{ "Event": { "published": true, "date": "2026-03-03", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-03", "timestamp": 1772583323, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "60f94427-09a3-4d35-99f0-a69b73d107d6", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772496431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772496431, "uuid": "4fb9dd23-cdb2-4531-a3d4-e16501e0e22c", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772496431, "uuid": "52ba6413-8073-43c6-afca-f650611c9eeb", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772496431, "uuid": "e7c24afa-002b-4761-89fa-aa98ba10bc6d", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772496431, "uuid": "6ef32c3e-a509-4dd3-8bc9-de3049c48d4b", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772496431, "uuid": "489d7b94-a365-4f50-a4e8-a16aff2fc68f", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772497687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772497687, "uuid": "d9ccfcdc-63b3-4b7f-8d5e-ca7899b0fcb5", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772497687, "uuid": "02a6e0ea-8461-436e-be2e-d0cee13599d3", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772497687, "uuid": "7c2c7f6b-2e17-4007-92b2-c8e24005417e", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772497687, "uuid": "10fa7a8f-9042-43d5-95d7-3de35c8f2fd1", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772497687, "uuid": "ffe29314-4733-41dd-8f55-3d3569990bd6", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "628316e8-1699-11f1-87c8-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772498346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772498346, "uuid": "ea3d681c-978c-4926-9ba2-ee3061ebe11e", "comment": "Malware payload (RemcosRAT)", "value": "83f5156c7eaa6fa7681d5783e4b0dc6f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772498346, "uuid": "a2ab117e-ee81-490f-a9aa-2751b2f66c04", "comment": "Malware payload (RemcosRAT)", "value": "6a794a8e3184d505573cc23c957b78b11a7eb89317ae2a82bbaa1195c310da0e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772498346, "uuid": "a088a495-8358-447a-aa6c-53018a0eda13", "value": "T1D27412273B9AC08BD56605300CB2DDBEEDA8BCAC5821866B7790F75DF47325468493", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772498346, "uuid": "37d0985a-b411-4e61-8a51-30d496e0209c", "value": "4ea4df5d94204fc550be1874e1b77ea7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772498346, "uuid": "0f5d1587-29f8-480a-a991-6360f6ddb57e", "value": "6144:cwq3NpGrARHzuMKqcCgog6NCnnN7Y418YZzjERFi00e:czSiHzw3nN847ZMRFi4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772498346, "uuid": "0c9f101f-3e9e-4bf3-82b7-5a42be304232", "value": 369680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772498346, "uuid": "a9ce3535-ed1f-4e48-bfbf-b86c12066ba8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772499853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772499853, "uuid": "07757631-7776-4ea5-91a2-0717d28e2518", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772499853, "uuid": "b455a156-b860-4696-9a2b-56484ae9902f", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772499853, "uuid": "e1d73b73-5813-4ee0-8983-6299922b7f6b", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772499853, "uuid": "d87b40b7-396e-4fbf-b196-414117ee7163", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772499853, "uuid": "02d7692f-9024-484a-b9ed-c7bfacba0c38", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8e1d05c-169d-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772500209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772500209, "uuid": "6a0fb233-31a9-4f38-aacd-7f00ed34bc4f", "comment": "Malware payload", "value": "7c42559e2c52d57707edbd43e13cd256", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772500209, "uuid": "0f1cacb4-e90b-476d-86d8-3535c1a9cf1d", "comment": "Malware payload", "value": "3a61ecab2540b94bee4d8d3050e822819832a91316c365abb4f6f52448a8eea0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772500209, "uuid": "d5928149-d465-4b9d-9742-f5dcc7d49b3e", "value": "T1758308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772500209, "uuid": "e5f5e982-3243-489f-b096-4feda001da40", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnUWaBVN/:XEKltp9t2SX/yr2pbUWgVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772500209, "uuid": "16f995d1-523b-4443-bc5e-7628bcd37ffb", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772500209, "uuid": "af266568-cb8c-4179-ad8e-261c023a0bbd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772501660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772501660, "uuid": "e9e30344-e93c-4124-b841-43645af5f8a3", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772501660, "uuid": "6c1ca2c5-2187-4c2c-8441-d63a83005f5d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772501660, "uuid": "5b823224-fd20-4628-9b5b-c385ecef878a", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772501660, "uuid": "a6c87c50-d755-42b6-8428-600043acc2e9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772501660, "uuid": "25ade10d-ef03-4c4a-80c2-9b45843b1b2d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a1ba657-16a3-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772502734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772502734, "uuid": "e326d447-cdf1-4785-9569-5f50dd2f556b", "comment": "Malware payload (Mirai)", "value": "a4019e6318d1ef179ae52a1d8e37effa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772502734, "uuid": "407ddec9-3289-4151-b427-bad0e723e66d", "comment": "Malware payload (Mirai)", "value": "00373ae35c7a9b3306787a9b4d686e59dfc1a4790df78a4a84a30016b0005731", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502734, "uuid": "36e815b7-be98-4f8c-9d1b-73b4c49983c9", "value": "T1CEC31859FC829B15D5D526BEFE0E528E33131B6CE3EE7212DD146B2427CA95B0F7A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502734, "uuid": "a3d003ed-19f5-493e-94e0-dfbe53e75218", "value": "3072:QDtiEoz51jaJSF+bcgOIAaaGv6aSmFxvJtKMLzLQ3lCtv2FWkl:QDtiXz51jaJSF+hOLiSaSmFxvJtHLzLO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772502734, "uuid": "6e8c0a3a-226e-495c-b4ef-283308b30c46", "value": 119784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502734, "uuid": "1b1fb8f5-d5e2-4a23-9347-389862ec4107", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0792650b-16a4-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772502918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772502918, "uuid": "2396ab42-46dc-40f7-bd88-40abb845e4e6", "comment": "Malware payload (Mirai)", "value": "83afa382fb3da6449ba608ba6a5cb53c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772502918, "uuid": "0fc39dd3-b0ff-4661-b391-01cceb175e21", "comment": "Malware payload (Mirai)", "value": "7ffd25afb89705b96ecee7716eff0900e3d7127b7552db3aac5ea6d983b88607", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502918, "uuid": "fc6fcc69-d750-4aec-b076-66ec64da77df", "value": "T151F30745B8519B17C6C516BBFF4E42CD772A17A8E2EE7203CD256F20378B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502918, "uuid": "44d7e251-5f42-4b3a-86d0-fea342db175c", "value": "3072:g7gKP19Kfqz6BGokiP5dY9oTpnR345pGoSTUwDpIH4:ERP19KfqzMGokiP5dY9odnd45QoSTUgf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772502918, "uuid": "f40ed110-4374-4b89-9016-57dfae0cb4c0", "value": 161720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502918, "uuid": "81ef0c39-a4ca-400f-87bc-aaf0e091ce43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f0e4118-16a5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772503440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772503440, "uuid": "ad2f1e8c-c9d9-42cf-a5d6-9be30f47770d", "comment": "Malware payload (Mirai)", "value": "d13a727e366fef31ffd3160aae2968f3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772503440, "uuid": "a6ce1e8b-c04c-434b-bc7f-9bfbf1033e75", "comment": "Malware payload (Mirai)", "value": "d40ddd30871943adb3c447e4202774d8baa8f820ef2606314232049f9ef541e5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772503440, "uuid": "9fcd7653-3424-4c62-84e0-2a6dd7de5e87", "value": "T1E8F30745B8518F16C6C526BBFF4E428D772A1768E3EE7203DD256F20378B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772503440, "uuid": "a67b151e-b3ee-4bad-a846-cc547d660105", "value": "3072:aHDCPFx5RmwfGlYhOj/uBDh9dzUz4LFuVv8u7vdtof9:eWPFx5Rh4YhOj/uBDh9dQz4LEVv8urdQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772503440, "uuid": "274df429-da1b-4185-9541-e230fdfa8197", "value": 158200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772503440, "uuid": "4e4af42b-ff44-45ef-8c8b-5e8f921cdbdc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abfcedfa-16a6-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772504053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504053, "uuid": "92433f1c-c3e8-41ac-9920-269313d1b77e", "comment": "Malware payload (Mirai)", "value": "264de251c123bc0bc41c7cf40a88719d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504053, "uuid": "83c17a5c-f703-44b3-b9c4-196936beb4c7", "comment": "Malware payload (Mirai)", "value": "8ac799559b827697e2f199900f6ee1acd4ce9d55e6614a24bb62851ece2b8029", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504053, "uuid": "f0a1f871-24f5-46ed-b03d-521eb6f2382e", "value": "T1D224B65E6E228F7DF66C873447F74A209B6D23D623E1D685D2ACC1141F2438E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504053, "uuid": "af7d437f-d93a-4be1-bfa4-deb898025e5e", "value": "3072:zm1UhvEQLO5NIH5xP4b+ZSkpoyeur0Qtx3+XNTByA8HXGT1dFrf3Go5:C2ZEQ2NIZJI9kpbd9OXNTtmXkdFjN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772504053, "uuid": "fcacc017-9c78-4e84-aece-b897e8b011ef", "value": 224636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504053, "uuid": "8aae39eb-1269-4c7f-8974-f6f8192bbefb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8469de-16a6-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772504161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504161, "uuid": "0b10eda2-5002-45bc-b4aa-9ab210fabbbe", "comment": "Malware payload (Mirai)", "value": "916a95bafbf319ef89c5d95128b77456", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504161, "uuid": "498c9f94-8e48-44e8-9848-3318af60bf3b", "comment": "Malware payload (Mirai)", "value": "11261321ec75bcde1aa101a0670998ee095a1c3927351ec047a2ae2c024c64a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504161, "uuid": "cc7bf7cc-8e50-4192-8961-8c006cd71d3a", "value": "T12C415ED7189909742CDDD9AB33BB681034D4D09B2BC5AF0F68EE38E4098DD85B8C4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504161, "uuid": "641d2558-acf3-473f-b4f3-0518893b9163", "value": "24:vyGnDL/dLJLYWRL9LgoLRLlbLC0+MfnLAR9RG3RFBHLlbL1Lrchig:vyanpNJhgKVtTlAR9R4RFBrtZC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772504161, "uuid": "e67e47e8-3b15-4f56-a4c3-24ca57c3b359", "value": 1968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504161, "uuid": "a0e505f2-4159-4e46-8cd7-7d99ed16f60b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bddb6e09-16ac-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772506660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772506660, "uuid": "693dcc40-db5c-4a30-97d3-198a775838b0", "comment": "Malware payload", "value": "99d616f601459b35942c56034ab9650d", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772506660, "uuid": "86f316e2-da73-4121-97d6-0f6a0fbbe247", "comment": "Malware payload", "value": "a6ebe30f27a57c73a97b29dcaafcfd2ae8bce7f96813a7578fdba2b3dfb3edde", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506660, "uuid": "c127c061-f3cd-43b4-8173-f9f1341790b8", "value": "T1A3C623116BF9D678E0F62A39E8B6A0B0A5367D124D22D12E6334791E2C75EC0C9737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506660, "uuid": "5077cdfb-8700-4940-a047-316743bc5fc7", "value": "196608:wHxcp9ym3nltDUJVFHxcp9ym37Hxcp9ym30Hxcp9ym39Hxcp9ym3qHxcp9ym3:eGplpeGpFGpSGpvGp4Gp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772506660, "uuid": "eb11b34b-f674-4ca4-a1b3-f8281b7949fb", "value": 11919360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506660, "uuid": "3500eaac-d6c3-461b-bf3a-99347a84d315", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f022c5e6-16ac-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772506744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772506744, "uuid": "435cd767-c8c5-4a2f-b14d-f4cf8eb4a204", "comment": "Malware payload", "value": "fb4e3f5a4bb0c00431429074e2ba2a62", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772506744, "uuid": "b6189505-c480-4b03-a842-eff2431dba27", "comment": "Malware payload", "value": "d38fa114cc9dfda6dbd21ee6411e12c9e53b62ad9e0b1f06b35730085301d86d", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506744, "uuid": "18c107e6-f005-4e38-8924-e32a4c6bcf6e", "value": "T150F6122232D55E08D0B387F802A2D9B997337F1A2575D25A20F5BE97FBF39424C066", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506744, "uuid": "84f38513-1d72-40fb-a623-5f2465488333", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506744, "uuid": "3eee2aff-0dcd-4cd3-b34c-a3e18df6f117", "value": "393216:47F7QNH3hGZSLoMkCLQMWu0VwCnzo+vSe7PEmrkSB:47F7SXn8cQMWuCzie7P9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772506744, "uuid": "8d37fb99-b3da-4d8e-abce-ad359441480d", "value": 15541248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506744, "uuid": "719081b2-3f88-4d09-8944-98f02d3e6492", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31aecb88-16b5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772510290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772510290, "uuid": "9b4638e2-818c-4694-aae1-083ab54a3785", "comment": "Malware payload (Mirai)", "value": "8a4510580036ff84f2374386768f60fc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772510290, "uuid": "eacdcce4-2d7d-424a-aa90-b1730d0a8e42", "comment": "Malware payload (Mirai)", "value": "16997823d0b770af0cb30943c2ba783dbce5961643b696bccc01f82dc7f65b65", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772510290, "uuid": "d49322df-f56f-48e0-a0b3-73a85b68eecc", "value": "T168F35B0BB4C090FDC8D5C2B48FAEE216D932F45D2138B21F27D47E262E5DE216B5E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772510290, "uuid": "e5df6f4e-edce-490d-b6d2-aac09f687827", "value": "3072:DmwwNVKnjtOmZhjhNirlsJrWpngvH4e8R+4E8s:OWbyxWG+8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772510290, "uuid": "8259252d-583a-402e-88b1-b315d0f8886a", "value": 164776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772510290, "uuid": "4b51bd9c-044e-43d9-8c4e-ff6df69d7556", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772513110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513110, "uuid": "015c902b-d467-4439-9bd3-6579e0000e22", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513110, "uuid": "7cf36926-4619-4c6d-934e-e2e5aa31665e", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772513110, "uuid": "630a50c1-999b-41fd-9b7d-45165e6c11b9", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772513110, "uuid": "654b2033-c5ae-46f1-9cc7-84e1fa5a01fd", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772513110, "uuid": "493d0a97-4226-4da2-bddf-fe053ea78cb4", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e503597e-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload (AmateraStealer)", "timestamp": 1772518751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "f2b73046-59b2-4fda-a79e-ab3310a2a147", "comment": "Malware payload (AmateraStealer)", "value": "2ebd76c7d0c0ca119817183dae7c6260", "object_relation": "md5", "Tag": [ { "name": "ahk", "colour": "#a8215a", "exportable": true, "hide_tag": false }, { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false }, { "name": "phishing", "colour": "#3de820", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "susp-clipboard", "colour": "#edf7e7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "e492ac22-9ad4-4772-a9d9-d72d7151fa3f", "comment": "Malware payload (AmateraStealer)", "value": "5921b72b0b87c50ff2058c28b504276e1b0086a75d2bbd82d2ddf7f0e55457be", "object_relation": "sha256", "Tag": [ { "name": "ahk", "colour": "#a8215a", "exportable": true, "hide_tag": false }, { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false }, { "name": "phishing", "colour": "#3de820", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "susp-clipboard", "colour": "#edf7e7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518751, "uuid": "f213950b-f755-4aa2-b9b2-05b318997d63", "value": "T1F7262902A3E95109F9F3B7707F748142AA75BD466B38D58E328C148C0B79A78D5B27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518751, "uuid": "d47b7bd7-0725-4429-90aa-81c1c544638a", "value": "62848721a0fe32270ffbda7abe4e1f5c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518751, "uuid": "ff8dd4eb-ed4d-4d0c-883e-fedfd1dabde0", "value": "49152:r1beL/xJTc6M5AhmGpLSAzqx9lBt/KrkZ3XGCziPs75xF7kwl75FZ5ShCxFP+j15:rNeNJdY6l6c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772518751, "uuid": "adbaf36f-3a78-4aa3-ad7b-f2fa6647d2c4", "value": 4723256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518751, "uuid": "a0d2c91a-be39-4058-b663-daae9156a98a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbfe8b7c-16cb-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772519971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772519971, "uuid": "38ed9a7d-7b30-4d8b-adec-00cddcc3d84b", "comment": "Malware payload", "value": "7d499a4b0d0b4a232fc1c84664b95403", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772519971, "uuid": "f12619df-15f3-4483-8abe-6cc898f61870", "comment": "Malware payload", "value": "2e0408134668af290786dfb2bdcf17b68ba6f61fb0a6158eaa7bbd809db18ef7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772519971, "uuid": "3a8e3dc8-eca0-46f0-b032-8e9239715894", "value": "T12EA3D91916670890F1EEDDC00D85B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772519971, "uuid": "eef17ed3-2dfa-473e-983f-5c3955dd7be7", "value": "1536:x4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAn:qgVBH3mPm+sqk+HAw0F5KijXxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772519971, "uuid": "a844383c-0fd2-4766-b847-21cd35764215", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772519971, "uuid": "65edd06b-789f-4aeb-820a-12173da201f4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db94d152-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772520248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520248, "uuid": "17c6507d-4c78-488d-b371-ae275f9d426f", "comment": "Malware payload", "value": "1f18f3a821a3f75a9921f1284cd17d50", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520248, "uuid": "fee4f09d-1fab-4703-9fc1-870b1736e9c8", "comment": "Malware payload", "value": "40bd37eba7f9a56516c96092d5c6d50937fc4df00baf79155ada9d1673389830", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520248, "uuid": "ce7988d7-3dc6-41b9-abf9-7f84a84b7f08", "value": "T164E56C692B0A5C73C3EF93A199757F6DA274B3212D53582B22AD21C9CB352E13F07B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520248, "uuid": "6af51b57-f95c-4efc-b788-6e32db422bca", "value": "49152:8UixbItdTrJoFVPMvXGGHqXRolcbqRSp90qb:7iBI/JoFdMPG/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772520248, "uuid": "264cbe55-4475-438e-8b3e-422470d4474e", "value": 3163645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520248, "uuid": "7bf7635b-9ae8-49b3-8b5f-f8709f4b83a7", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1a8452b-16cc-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772520410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520410, "uuid": "24facf69-b24c-4a32-8026-722efbcb31a6", "comment": "Malware payload", "value": "9d2f21ca9a549b369a2839bb1b1f5099", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520410, "uuid": "45c206b9-60ad-47be-9951-efe0423923c6", "comment": "Malware payload", "value": "e49d9c41941f135ab50be0f4704cecd7a6010db93c31a741d097ba891d38ff33", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520410, "uuid": "e9b72651-f841-4aea-8c9c-6d4dbde12f06", "value": "T1AB24940AAF510EBBD86FDD3706E90A4635CCA51722A83B763674D528F50A50F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520410, "uuid": "e725a200-d662-42c6-a56d-764a88237059", "value": "3072:A5JZ/kiJCQLxd9ihqcmdsJxiHYlNH4kYVqAGviviu:A5JZ5CCzih7viHsfoqAGviv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772520410, "uuid": "39912861-d95b-430c-9f90-9bddd9d747fc", "value": 224636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520410, "uuid": "3af61310-74bb-4d42-be83-2e0400849534", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4534bd86-16cd-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772520631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520631, "uuid": "e4aaca9e-d8a1-489a-84e0-bd088771737c", "comment": "Malware payload", "value": "8e6b99f0aa03d8d8c929eeccf1e55397", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520631, "uuid": "d2117ed3-cfdc-46dd-94e0-53d0143f4dbf", "comment": "Malware payload", "value": "5cfaf3002881fc6fed5322b5714df68fd832da3c8663a67eff0a0d1e91c1c9c7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520631, "uuid": "9081c1f4-8782-4c52-b150-b2bec8c6c5c5", "value": "T18224DF8BAF05BD3BA4014C1E27EBD909BFE11606F2599B84F702DCD26D45653B212C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520631, "uuid": "7f3d4461-8cd6-41df-8779-714fd1e7fb31", "value": "6144:eoQoU8gbnDvGZvR0jrWB+/T3h4N4b8pNztMGjNr7JmYbu6Pf:MzhTCvR0jvT32jMMBmL6Pf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772520631, "uuid": "aeb6691b-df75-4920-9933-989a3aec87cc", "value": 211034, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520631, "uuid": "d21b26f9-7701-469c-b067-e52832c74853", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d09a32a-16ce-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772520993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520993, "uuid": "349b23bd-0976-4a03-ab16-d2ca6f2f38ce", "comment": "Malware payload", "value": "4b6170f7126d098cba9b783b7ab3c982", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520993, "uuid": "d6d5c693-2104-4ec2-9de5-1ef776501f41", "comment": "Malware payload", "value": "f3e6d34ab22024f6858680f68160617bd8c64d0f9cfadbf378c02a74e05b2e18", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520993, "uuid": "fe497263-02df-418d-8bc3-e03e69443859", "value": "T1A824E0065507F575B2C5C59D136EBB913A8D224C13A981E1F0FC6028D99CA2BF37CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520993, "uuid": "c69fd5c1-3097-4270-8e44-743c3f3a16e2", "value": "6144:QzJvwMOxl8RnNgfL5MEGvx2oTXYQEuaSxBB8G/MYvEVXfmZ:swJxl8RcWrcNQLxP5/XvK+Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772520993, "uuid": "16b2eead-a335-4d6e-821e-631c08f73bac", "value": 211033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520993, "uuid": "8bc006a5-cb4b-4b2a-97d3-ab59501c9460", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949d9ad9-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "57aaa40c-a88d-43b4-aafc-e166403075a9", "comment": "Malware payload (Mirai)", "value": "b7d5c71a65d20cda7e606e1cd8bb5d83", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "59a12fbc-d9f4-4b26-b072-24228f7ab7f3", "comment": "Malware payload (Mirai)", "value": "4bf771b4d750b3d3beb1aaa1311d7890f1b83a9242f5183fe72e7dfe2a02ea70", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "6cec6d72-151f-480b-9581-5a251f64d98d", "value": "T19AA33B05D951972BC2C2177EFA9B529D37232F58D39B3311AA287BB42BC279D0E3D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "a7abfe8b-224a-4bfb-b5c5-3307f510e9f8", "value": "3072:v00aynNWED1M3WOUhrIJdyWFy1x691DNU9li493NQ95Qa6j3uTkCuwvseQbOFqUH:Jpa6j3f5eQbAmyWQ9qfC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521214, "uuid": "34d03e7a-498a-4591-8f21-bd52bec84909", "value": 106526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "b2b89b10-af67-4845-8539-b52480f6f6ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a08e9a-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "0bea6e7e-6bc9-4733-b033-7e91c34aa75c", "comment": "Malware payload (Mirai)", "value": "e2533469eb80d740170b80fb4108d0ba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "1f8e98f1-7592-4e72-bc18-44b5cb38e9bb", "comment": "Malware payload (Mirai)", "value": "bc0b175fc6ca68475397d362b5c556c60ac2d1bac7b207fb016ba2fb9ace771e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "2d7f2948-16e2-4d10-a6a0-910979669208", "value": "T19F044A03759189FBC4D69FB81BEBA5228523F8391B3232067398FDA51F0DED86E1D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "ecebb129-39f0-4310-aff4-d54b55ea9dfd", "value": "3072:DPZ3Q/ayISjT2ddmkY5mK0+TVM7fCvs8L5HyJ64Y23uKRTD:MzpH7CCvs8L5HyJ64Y23uKRTD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521214, "uuid": "6ff0720c-baa9-4ef3-af6f-57f37452927e", "value": 187129, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "14f5feff-e621-4288-9880-5d98e16fecd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a7828f-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "45ca9073-ba92-4a88-8b57-f2d5f6a20d6c", "comment": "Malware payload (Mirai)", "value": "7d80585b6581ca57b16d8c78da3a8cf2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "8aca23c5-aeaf-450b-bf5a-a46230c88841", "comment": "Malware payload (Mirai)", "value": "3c924ae8905ee297be06c3eb02fd6340d22b902e1f8e34a831996c71d3b6231a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "e8cf5ae5-6500-4146-9b03-114fad89a8dd", "value": "T12D34C716BB919EF7C89BCD3306E6860120CDF45722946B2BB6B4D61CFB0A94F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "01e12c81-9905-4dcd-b470-87d06d735889", "value": "6144:3he6zMTV+0l4BTivf69LBlI4XpsZsKyN0:xeXg08ivf69LBlI4XpsZsKyN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521214, "uuid": "16483f24-4c14-4fb4-8733-0fe8ab83781e", "value": 238913, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521214, "uuid": "c72af5e4-aa17-4636-9813-2c9f12310157", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949a5868-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521221, "uuid": "2a6d55e8-8ca9-498d-8fe1-7e26cb209207", "comment": "Malware payload (Mirai)", "value": "b038a9d06df067eec32dbad09e9a56f3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521221, "uuid": "93d4df79-9a91-4c90-8231-f763dac0a6b1", "comment": "Malware payload (Mirai)", "value": "ef15218a93fd7274e3904f9e58831fea865d69020a91635b0bed69379b22ab41", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521221, "uuid": "b670bb35-93b9-4adc-ab7d-be817a54bc4b", "value": "T191E32A45A646DAF3C8830FF612A75A260633EC295F2FDE45F32DBCB45E055C8B10A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521221, "uuid": "428d3495-d84b-4dac-9844-12792e3034e0", "value": "3072:RvKS2YjfdJIy++r42Re13Yv48LywHJZZYxJuKgTh:RvhaIM2Reqv48LywHJZZYxJuKgTh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521221, "uuid": "292c81c8-23f2-48db-8355-e2c15504e210", "value": 151863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521221, "uuid": "1d7a2579-d423-41dc-a406-1a8aca101492", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a799d8-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521221, "uuid": "f5148935-63aa-40ef-a35b-3ba5c7644a96", "comment": "Malware payload (Mirai)", "value": "10ee9c24c03c009f4398b56e990f9325", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521221, "uuid": "a409d213-60dd-49f2-8226-b7e52c76366d", "comment": "Malware payload (Mirai)", "value": "1ec4349dc3a07ecfc1d86980b30bd00f5fa978748d6fa8e2c5e1deb2c86adfc1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521221, "uuid": "c73177a2-680f-47c5-b335-e1faff557fe2", "value": "T1AB041983B905DEF6F40EE73204D307257231BB654A535A36B31B7979AA3A2C4382BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521221, "uuid": "0fd8e77d-8333-41d6-9fe0-0d5395b9b3ba", "value": "3072:NtuZCTKkGmy8C8Vr7o2lt3qluv7GWXhLi3l0bN8IWvtGLAxHZ3eFIJTKCTD:NtJ2my8NVr7o2TqlqLJjWvtGLAxHZ3e4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521221, "uuid": "c88ec37c-92b0-47a9-8b05-2eae7bf757de", "value": 190087, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521221, "uuid": "2b16cd7a-aef8-4172-ae55-428a0b3e3efe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9491feab-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772521224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521224, "uuid": "6fac5e1b-6c32-4fb1-a879-b6620dd66926", "comment": "Malware payload (Gafgyt)", "value": "854a6656ad42911ddbe23e62cacecd0a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521224, "uuid": "e9a93138-61d3-4850-8a4c-74fe02ca40b4", "comment": "Malware payload (Gafgyt)", "value": "448452d8804f49777e0d8d1f31b1bfe9bf6e73965574dc30dce6e8a58f1ca5bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521224, "uuid": "398f0d20-d991-4b4a-aa01-ccc147bdcf87", "value": "T18E140B05E9145B57C2C22BBAF79F42D937336B1897D73301AA29BEB02F8679C1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521224, "uuid": "37a060f9-11f5-4fc1-8873-ca7ea9890046", "value": "3072:5RXIhWvWsGUHDOLzTRU1cVRgfFed+9nY2t09ntLedOb4ixPek/RXmykGKq9qTcD4:Twb4itekJWykGKAvyGLpcVZWne9452/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521224, "uuid": "d9aa9dc0-1338-4557-9f57-783fb426440b", "value": 192725, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521224, "uuid": "19c085cc-ef0f-4911-9393-10ba045c5cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772521239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521239, "uuid": "433c4cd3-9d37-42f1-8fc1-30871b4050bc", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521239, "uuid": "23982a4a-552c-4566-8cc1-30a93695b165", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521239, "uuid": "27c644bd-b56b-452b-8734-c23989859eff", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521239, "uuid": "34b704d3-4dd5-4713-a034-3433fec42173", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521239, "uuid": "8bddff19-5fcb-4698-a455-ba1bf6b5d57b", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b560c4-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521282, "uuid": "92395990-9f7a-4fe5-a866-a82240de65dc", "comment": "Malware payload (Mirai)", "value": "1cd8c618737aac1059d9ac69c24fb845", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521282, "uuid": "d74dd358-4d52-47cc-869f-71c9f032445f", "comment": "Malware payload (Mirai)", "value": "876577bcd50061d0ae066c6b6c328af673595233441df9c9197e440add1a09dd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521282, "uuid": "374b8408-5a6a-4fbd-bb65-d981ecb301d1", "value": "T1BA34A72A3A12EFBFE568873107F38A7087D525963AE19346F26CD71C1F2128D584F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521282, "uuid": "6fd39150-6e25-41a0-9fdc-6069967d2a36", "value": "6144:tHyiJHp4wKld7Fc89yivg69LBlI4XpsZsKyN0:txpd80ivg69LBlI4XpsZsKyN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521282, "uuid": "4c642bb7-4b4a-4696-a607-80a6143dfa86", "value": 238852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521282, "uuid": "b980582e-70ad-4d71-b816-6e735af47bf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9494baf9-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "0ca4df0c-863f-4c44-aca7-25632f4867bf", "comment": "Malware payload (Mirai)", "value": "f8db0813d6192ba0d2b34c2b37df91af", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "7d4e9649-e548-4430-8a58-3912c972af73", "comment": "Malware payload (Mirai)", "value": "60d896fd063131c40e1036d648989147f787f46d17e33decff8a24c08651d35d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "4a201369-e572-43cf-a3c0-b3bf9bdd615a", "value": "T140E34D09EB409B5BC1D2277AFACB428A33239B54A3D7331559386BF43FC27994E325", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "9a67111f-01ae-4fa8-a9e9-dd78c92fe6c4", "value": "3072:4/qynRmEdMC3WiLhlYIdsgF+1B691iNg91i49INv9qtasWcsK5ukl1TGJJXZa+lj:4/PasWcsKEkly5Za+BM/9Mm0w3+6C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521283, "uuid": "354f705c-1e9c-414c-ae76-02c298d0da03", "value": 146038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "6aa38e07-0f9e-42a4-a593-d0d1d5023619", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b270fa-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772521283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "0521cdeb-2b7f-4e67-90eb-cc89817081c0", "comment": "Malware payload (Gafgyt)", "value": "621e679d51f49c27a0cca1e9a5961ee5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "0036a458-6aae-4238-a5e7-4f670195c1b6", "comment": "Malware payload (Gafgyt)", "value": "0fd0434d337188f1ccc4babaa0889494948ebbf59545eb67e1767f2430e66e4b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "94bb47d3-1a11-44d0-a76a-844c5955edd8", "value": "T17C041B45F9145B57C6C22BBAF78F42D93B326B1897DB3301AA356EB02F8679C1E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "a4134c9e-f649-420e-9f3b-22a4c4ce33a5", "value": "3072:TRXUlW7JsG4jDCjHTRY1wVNgfFadi9DY2tg9Dt80hJL47ahdOLWMlMz/KrtmbjlP:HXL47CdOHlU/K69pFvNGLZxYZkrTN55q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521283, "uuid": "f809ecb1-4505-482a-907f-28c3e5dd946e", "value": 185179, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "d14859a8-e9ce-4cd7-8ccb-0e1ddbff4aa6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94ad4828-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "b8cc0910-4dec-49f8-b6ac-2adc2c1b29b6", "comment": "Malware payload (Mirai)", "value": "a2ecbd8af2465c81e99559b1b0e6cead", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "02543abc-622f-4c7a-ac70-83126a71d762", "comment": "Malware payload (Mirai)", "value": "58968266f92ea06e3f064e23e58d689cc9d6841082581e06876d36d4a14228ca", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "7e488c66-63dd-48df-9411-581060f04f07", "value": "T1A7F32A4768B55FB7C185AFB531A35A740757E9211B1B0B8AB23EEAF00207DCDF80A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "24b4377a-716d-48f6-9b27-5a834560732e", "value": "3072:wgr/XQCUv5n5hOSqj1rWnnIniUDiWmgv3UqAKHZiXpIJTK5TX:wgEC855hxk6nsiUDiWmgv3UqAKHZiXpt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521283, "uuid": "8d9ee576-354d-468e-85d5-65c1fb976616", "value": 163752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "a553c998-358e-460c-909b-2a447b808bf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949b3aa3-0917-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772521283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "8d3a849a-9bd2-466a-a808-a81df1069cd8", "comment": "Malware payload (Mirai)", "value": "cfe20a37f59b7fd98be4f83b58a68d7a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "26402396-7bec-44d8-a0ad-a2ffbc2530af", "comment": "Malware payload (Mirai)", "value": "3d5add2acceb6d8ffec49932f7bfa31e2c945dcf366e1317fe9c998dfb37fce3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "9726a756-5110-43a5-8d74-258d51d6bad8", "value": "T12B043A07771C0A87C05B2EF036F723F087ABE95116A2A184F21EFE845376BB16519F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "6f763695-3137-463f-bf71-e60234f73933", "value": "3072:5PBNOI3xxtqG3eMqilIlKbtye4rv7GqAxHZ3zpIJTKCfD:5PBNOI3xxYG3DKKE3rv7GqAxHZ3zpIJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521283, "uuid": "90887869-e053-4d77-8c15-ec2939a12bb4", "value": 175750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521283, "uuid": "04858fee-f906-4b61-b1dc-b9ccbafa00b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30b9bcb4-16d0-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772521885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521885, "uuid": "35e1b386-8acf-4b70-880b-cbd01090445c", "comment": "Malware payload", "value": "14de9f4f2f5efca432df2bff622f4b98", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521885, "uuid": "34e4ca5c-7515-4a3b-a616-d9a458d2158f", "comment": "Malware payload", "value": "c32343a43215da70971163d7c765845ce0246a90b12da62774c2bf16ea2e34d6", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521885, "uuid": "e0f2747e-0f13-4e0d-b6a2-3c2375672302", "value": "T1B907F8CF108A5A978BDD67C458352FB8337576163D573626A2BC20EB8E393A61C43F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521885, "uuid": "64997142-2d90-4f61-8e54-2727496022cf", "value": "49152:8UixbItdTrJoFVPMvXGkp+w68WzmzFsaU2veKqmJljaH0tsgJReYQuyJ129RkvuI:7iBI/JoFdMPGF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521885, "uuid": "25056cf6-2820-4f6b-be97-725fcc4c6172", "value": 17055229, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521885, "uuid": "1dc3ab6e-7866-4268-9462-c4ab4b351654", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a4f32dd-16d0-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772521928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521928, "uuid": "11758b03-7b16-4705-b9d6-77e422fe0ffd", "comment": "Malware payload", "value": "f8f63f1856bf33e5b2c7c4113dce171b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521928, "uuid": "84fd77c2-1725-42f4-8b34-61a295efd217", "comment": "Malware payload", "value": "9e7f791132066d1abc1f17a1153fca4a9fb768d2b9e9a48762ee674daa7d3fc4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521928, "uuid": "df2336b6-d395-4c69-9302-74adbeeffa64", "value": "T17925C0FA57579D9FC52A0E95F40C0215ECBCBC9772D980E9EF494EB209E504888B4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521928, "uuid": "73159a2d-bc7d-4c39-a657-caded66ea9cd", "value": "24576:WaNdIBaKM4ojEdv+sHmH2jQTDQA+/6DIFRMLHP8R7Y9WuyHTK6X:WnM4ojEdvVmHVTDfLfITK6X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772521928, "uuid": "e3007f22-1e3a-44dc-ba84-8636ca56fd10", "value": 999427, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521928, "uuid": "e65f36a1-9e7e-46cc-a99f-18e1a7ecd4a1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d687c79-16d3-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772523275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523275, "uuid": "bba65c32-153a-4140-8959-8bb6bcc0c12b", "comment": "Malware payload (Mirai)", "value": "c11a181b82d7752e2f4279a3f1ae499d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523275, "uuid": "25843076-e7ec-4f85-84a4-db83a15dde5b", "comment": "Malware payload (Mirai)", "value": "58e1a7510261151f4cf95b51aa40bc33bcd29fbbb2ff568a7227588c81d72dc4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523275, "uuid": "39633c79-bf93-456d-ad57-4669608ca0dd", "value": "T1C5E36B42EA408E03C4D51775BAAF414E3322A755E3DB73078E18AFB43FC6A6E4E671", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523275, "uuid": "1715df56-d205-4347-8030-5011f2773706", "value": "3072:sv0+fbnpjbyQ4eTcwDDb0NbqKfl/bnRB/N5r+BKM/94Qxh:s9bnZyQ4eTcwDENqKfl/bRBjr+oM/93D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772523275, "uuid": "72e07d0c-ccfc-4a97-a9f2-ec5c58c001e3", "value": 149278, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523275, "uuid": "7d4beb29-7885-4ac2-83e8-b465a145ac33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9001e121-16d3-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772523333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523333, "uuid": "92061096-34f6-4b61-8cf5-66f6149a711f", "comment": "Malware payload (Mirai)", "value": "133b4769464c0427ac534a86c2f6cf24", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523333, "uuid": "941762bb-1e96-4537-9e48-c92af13983d6", "comment": "Malware payload (Mirai)", "value": "5072a1c51d5944cda12ab3aa04bc2df03f50883046b49753dca3ea8fab6cba63", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523333, "uuid": "284275cd-cb93-48e9-827b-68b363616bae", "value": "T1AD830A82BC818D11C5C813B5BA2E118E33162769F2EFB253DE115F2477CA92F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523333, "uuid": "ff478cd5-2d89-4514-9ab1-1ef7f39bacca", "value": "1536:Hcn9r73E900YnM19dUVuujSLh9PdbvWFCwxvR/z0Ilqil+B3N0fhn7P:SruJYn8PKuujUhRNuwO+B3N0fh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772523333, "uuid": "93c950b7-5490-45c8-885c-067d24742e8f", "value": 84520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523333, "uuid": "c01e8a19-ba42-4cd6-ad72-66717e05c294", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9854a267-16d4-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772523776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523776, "uuid": "3e6c56f9-3752-4a01-afb9-3167c602c652", "comment": "Malware payload (Mirai)", "value": "49411d466966ceb7505cd352154b657f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523776, "uuid": "b4baa7c0-23b3-4472-ab3b-ee4e1d660d26", "comment": "Malware payload (Mirai)", "value": "0aea4555589b1b899abc68c1c6e60903e9f79c29d7f817275762fa40505d2f00", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523776, "uuid": "afa5dfdf-d38e-48cd-b735-c4cf5b756374", "value": "T1DC93734D6E219F7CFFAC823547B74F259248339A36E1D584D1ACEA021D7434A342FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523776, "uuid": "1cd8ade8-81dd-4af9-a175-a08c61e69afa", "value": "1536:8xJJYl59EG23bgd9HrAcm3pDZxMaiPJPlJ2ix3SIy914+0zH7qbA4ZB83X71B:oul59EG23bgd9HrAcm3zxMaiPR2ix3Si", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772523776, "uuid": "a293bd45-6bdc-42ea-a0c4-8370227574a8", "value": 97656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523776, "uuid": "427a3bac-30f9-4f10-ae22-e0adbd564d7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46b7f5d3-16d5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772524069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524069, "uuid": "24678a67-6213-4507-801c-411cd6e2173c", "comment": "Malware payload (Mirai)", "value": "b38786d6050917e71b2ee182079397ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524069, "uuid": "c89e85a1-52e6-4ca7-b87e-4ff8d5cdac91", "comment": "Malware payload (Mirai)", "value": "b8b60a5af170ade4f14b344da059ebecda89c9e136c42f33e588cd480a63aad1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524069, "uuid": "97b92dc0-fb60-43ec-b99b-a020d1f75d6c", "value": "T147632942FC81991AD6D013B9BAAE60DE332173DDE1DE760BDC105B247ACA91F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524069, "uuid": "395a662e-c2ec-4dbb-8ed2-333db8bfe1ca", "value": "1536:OtMQ0s7M1v2F5L+HdLT5/qR6YHFYmfoqyg4Thfm/7P:O70s77Cf7YHFDfooqh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772524069, "uuid": "0e20ebc1-c58d-46af-bd17-921525e906ec", "value": 66808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524069, "uuid": "2b556891-78ae-49c2-80e6-cf14c1c86926", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f641d76-16d5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772524218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524218, "uuid": "e00d1b30-2653-438e-a8da-268f07ed23c3", "comment": "Malware payload (Mirai)", "value": "9a0e13b077a7ac68b0261074542c79c4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524218, "uuid": "02799a05-dd45-4e89-a326-0d0f610ab3f1", "comment": "Malware payload (Mirai)", "value": "6d088ec98a0223b9fb5c9372e78397c97f8a02e1355b46ccecf75d487b68db47", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524218, "uuid": "9318839a-f780-4035-9a3a-5543922df89f", "value": "T179A3720A7F610EF3ECAFCC374AA92B85148E651621997F75BD70D818B60B24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524218, "uuid": "23665ee5-a940-4d80-ba4a-643710afe203", "value": "1536:HIXNqQL2f/0poEgA1A3LeZjeUoo1/OK9SZBqifJ7F:oXNqQL2f/0poEBA3LDeS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772524218, "uuid": "fb157618-cb18-420e-a2f5-7fbb8ee55b39", "value": 100552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524218, "uuid": "33f39f6c-f17d-47ca-8ae5-5d36c897421a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15788eae-16d6-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772524416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524416, "uuid": "445f1e15-6d8a-47b0-b4d8-469fd3242e55", "comment": "Malware payload (Mirai)", "value": "97d1d609a4b63557e70400e98f19be67", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524416, "uuid": "3a9c9be7-cebd-4ce4-b04a-001ea62a0222", "comment": "Malware payload (Mirai)", "value": "938a4c50b4efbb1ad97e31393f4ab160c1baa254277f645f82967d687b01a21a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524416, "uuid": "4440a5f1-15eb-4b12-8b3c-44247367edac", "value": "T15E731843FC81D906C6D013B6BA6E61CE3311739AE2DE7207AD216F6436CA91F0D7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524416, "uuid": "499e38ef-14c2-4273-a27b-e8bc16a0cead", "value": "1536:f2jCRjAOjrCT+aBGZ4FTM5yj++5mmFBJMjPzy2+46xklMmN7P:f2eZjaM4tMP3mFfMjv+zSmm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772524416, "uuid": "89d64417-8982-43e9-bfbe-b0c7aa04f70f", "value": 75040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524416, "uuid": "4d57bf27-6785-4c38-9206-1bf79a1f1765", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d29962b-16d6-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772524617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524617, "uuid": "c4b75d92-2e5c-44ee-a427-8884544baa7b", "comment": "Malware payload (Mirai)", "value": "ce4e7d6840328dd5aed069c6ca6bab4c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524617, "uuid": "3bfb8c88-ddc1-4af2-ac27-17d23fccbe0b", "comment": "Malware payload (Mirai)", "value": "5f07344e1374ea935af3d6041ae1185f172500aacc65949c553389f0bdcc086f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524617, "uuid": "0af7aa65-abaa-48c7-a6d0-f7fdb99ff899", "value": "T1DF733A792585F6BCEEE180B8F45320D518A20A1C37DCE0E37493947AEF74B49722DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524617, "uuid": "6947a1de-7a20-4d45-99ef-8eb08291ef36", "value": "768:2oEMqpCawCB0yOOe11If9TUpO7ANZFYJgWszrsYE/6wor4BVOWKci677B:2tMqgawCCyOxi1goURQgHrsHpL977B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772524617, "uuid": "af05071a-473b-4df3-b525-923f66f901d0", "value": 75152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524617, "uuid": "4f7636ca-3a01-4445-827b-2d96245dba2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "426b6a4c-16d7-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772524921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524921, "uuid": "80cbf079-8577-4a7e-a436-703696cf74f1", "comment": "Malware payload", "value": "addc4985887b80b58ff3113c062b1fff", "object_relation": "md5", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524921, "uuid": "12935bf0-22a8-4410-9969-8d108a1d58a4", "comment": "Malware payload", "value": "76fdc0fc53758a6e00019df7c9d034de03fc6a22252ba2ed94cb9758de851041", "object_relation": "sha256", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524921, "uuid": "ee805c63-7e72-4673-be62-86aee6968772", "value": "T1DA773B83F8E21EE4D4EAC571D129815BF6723C291B3823DB16A0F7241F3ABD06A767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524921, "uuid": "c070aabf-63dd-436c-92d9-de26b0cdf0ef", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524921, "uuid": "838c425c-8184-4441-8e15-b53e2a5e8f15", "value": "393216:rADmkaROFhihSDPBzaMuKaGpsWKctOCrn24Lux2JtEfmNSxXwY22oXvmIrbtCoXf:rAqkawFYhSDAg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772524921, "uuid": "984b1d9a-ff51-46ec-affe-199d974de950", "value": 34931200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524921, "uuid": "777544c5-49a2-4b12-bc5e-de66afe14081", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "491f3eff-16d7-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772524932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524932, "uuid": "06574ab6-9ba7-44bd-a5f2-a2fd2c48ae8f", "comment": "Malware payload (Mirai)", "value": "4ff272716f4f8123d63b1da75e132fae", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524932, "uuid": "d48f5364-e54c-433a-8d3d-0e6e267507b4", "comment": "Malware payload (Mirai)", "value": "765369623f5d00b45c21af0a064755157cee636712c21665f1f988696061fd3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524932, "uuid": "e9a3619d-aad6-417a-9eaa-c3952e245390", "value": "T1B4737C21AC792E06C0D4D5BE12B7C7A5B2F9270F24A4CA6D7E310F8EFF505D4A6066", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524932, "uuid": "406575dd-f13f-4c2c-94d4-9d42bb45a980", "value": "1536:124IV9x73W3JiITFqO5r5CsPdsOea7VY7R4:h4bZoCsPdseVr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772524932, "uuid": "116b7357-4be6-4479-8bf3-1b89d5f0cf1b", "value": 77248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524932, "uuid": "33206572-f613-4213-8e70-a79a244ef25d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db8dcce4-16d7-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772525178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525178, "uuid": "e4ae1034-1367-412d-a3ed-4d7f5e628763", "comment": "Malware payload (Mirai)", "value": "8b1fee9b23cb12206adde476e283fe16", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525178, "uuid": "0bf07061-4d44-4fa8-b9ef-06271c24dd9f", "comment": "Malware payload (Mirai)", "value": "3eb5b92e68f86b7be50f6bbbf9d679333edf9ba4b0d2e7e4bec5e70fbf527955", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525178, "uuid": "a11e4cd2-9d20-4a99-9880-753f23439235", "value": "T120632803BD8184EDC149D138537F757AC56635BE1238B1DB27E4FE2B6C06EA00B2D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525178, "uuid": "7132a8a9-cb50-4b29-adb2-55aa8b01d404", "value": "1536:IyMDrYi9/Y7kvIpFY7dl4kgKkOMQPEGaIjzCx17MA9:99A/Y4vIpFY7MOMAEGDzC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772525178, "uuid": "34157aa4-574e-472c-8cf0-c4b5f79c12fa", "value": 72832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525178, "uuid": "bb613a9d-f9ef-4858-9200-daac6ce14c1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1862cbfe-16d8-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772525280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525280, "uuid": "c50e0699-cd35-496e-bafd-22f0b31a1cde", "comment": "Malware payload (Mirai)", "value": "80cafb64b19d0b20b29c197f441fb151", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525280, "uuid": "ce3a8b4c-926e-452c-9694-76409897d6ce", "comment": "Malware payload (Mirai)", "value": "1ef4f2143568fb1a6daa77cf4f34b430f9d5e5cc7e1ed05a9edc959ccfadfa72", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525280, "uuid": "59ccf10d-408d-4b2d-8d06-15669b754254", "value": "T198735B8AE697D5F0DD420AF0207FFB36D93598353264DEA7E7C4F957ACA220290522", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525280, "uuid": "0f980ceb-56ff-4280-85f6-7ee2cecd9188", "value": "1536:VXxfAvPcun4feW9JEhd2uSXh7JcO27cgt:VlA89ed2tXRqO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772525280, "uuid": "46f728ca-c03e-4618-997c-bf75f9091b16", "value": 74972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525280, "uuid": "3ea08934-483d-4e1f-8e7e-3155af7e70e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9542d27c-16d8-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772525489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525489, "uuid": "607db214-f41f-46df-b039-bec80780bb2a", "comment": "Malware payload", "value": "660f1afd4cefccbd9f8b9632509bc7ef", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525489, "uuid": "a333151a-e0b4-4e33-874d-24d807adde1a", "comment": "Malware payload", "value": "e342c983f2a58e9e3a7659476878cd46d4c4af9f1c0a30f09212b1a37e11adf6", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525489, "uuid": "de131cfc-ff1f-4866-ae43-d565785e8f05", "value": "T19546AF13F2028573E52E1AB015B6573E5E788FA20E28C993D7D0FDF6AE7326187661", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525489, "uuid": "7b642d40-c7a6-487a-a8e6-6b2aba1db80f", "value": "f9ab754bc9fa6a8282105e098246a54c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525489, "uuid": "d5f9302f-8f3c-467c-856b-cabe80a9aad6", "value": "98304:e1/hneF1a1dO6Ye7ae3XHUqpD/SJBAUZLA:GeFI186TjgJVE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772525489, "uuid": "ab11d451-ef76-44ae-9895-0f25bb5902d6", "value": 5373952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772525489, "uuid": "947d4cfb-0c01-4bab-b8b6-7490995c3cc6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf313427-16d9-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772526016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772526016, "uuid": "b148a16c-70f5-4276-81ae-1a796831a66b", "comment": "Malware payload (Mirai)", "value": "5b9bf094cb3228356875aef4c2c7d4bd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772526016, "uuid": "d8576993-dd99-4c51-aab6-204ca24e768c", "comment": "Malware payload (Mirai)", "value": "2694786c0c215fd283d00d61c8d54e995cd200aac62940e676a106c64d7b463d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526016, "uuid": "189ba208-7762-4593-b281-b68d8625f57f", "value": "T159634BC5A693FCF5EC090A713133FF758676E23F2169DC87D3A499B2A842202D5162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526016, "uuid": "f8f0ad3c-c847-42b3-9d64-2bd37c9f38a6", "value": "1536:8nK11LHBef9vAL8mY9BGTr5GnSzckY2iHvqDRkuF7cgto:j11TBe1wF2BG/5G4c/bvq6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772526016, "uuid": "d7556628-bc3b-4b38-8315-c1736cfa20ce", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526016, "uuid": "76ed0563-c6de-4234-a792-fd0e322ae890", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b08138e-16db-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772526600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772526600, "uuid": "353ee718-6c2b-48a2-86b3-b65a7328d3ff", "comment": "Malware payload (Mirai)", "value": "9923810ec1a2aacb9ed96cd8e022c9a1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772526600, "uuid": "afeb7f9a-8c70-463e-9ecd-90feac08a7c9", "comment": "Malware payload (Mirai)", "value": "3eefbb511d87b67d9afc982a39a7aef9ea4fbb47a0995fc3178d3c7e86b2c84f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526600, "uuid": "e8967ea9-3692-494a-8f04-b52d11a0577a", "value": "T1E2634B0237684E03C1A659F9283F27D483FFEE9111F4F5842A4F9A1A8275E37156AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526600, "uuid": "fe9c6de7-d328-4408-a63c-cc31359d982e", "value": "768:AOlkHZX67R2cARuuRqT6wzRAbaAdgwiYf7td+9jLR4EWlznz/4gamthNYJ3HVlYa:AB7d5qLxwieCSNLzQV1HVlY7tQ7PF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772526600, "uuid": "a5e9a1bc-edb8-4ca2-839f-4cb18aa77e39", "value": 70928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526600, "uuid": "8195f3e1-2ae6-4966-a624-3a11a2325fcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ca80921-16dc-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772527193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527193, "uuid": "85cf2a59-7579-47df-91dc-f067d7caedfe", "comment": "Malware payload", "value": "2eda37186c03d348f0e0c1d10227cfa3", "object_relation": "md5", "Tag": [ { "name": "shortloader", "colour": "#200f54", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527193, "uuid": "761f3ca2-7b7e-4fb5-8eae-1b5f14d84e9b", "comment": "Malware payload", "value": "c699e514c112124939e0493e5066e814a8b18821961c453a2074af79c16a62ef", "object_relation": "sha256", "Tag": [ { "name": "shortloader", "colour": "#200f54", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527193, "uuid": "6b9094e0-5319-44ff-8962-817952432ff4", "value": "T1FC65330E648511BAEC170933C2EEC126B1FF359B17283137F7A7BC3851B27596A056", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527193, "uuid": "6f5d2fb6-529e-47ec-b260-ab50ff4ba1d9", "value": "7fa974366048f9c551ef45714595665e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527193, "uuid": "c27bb66a-49f1-49d4-8b3b-ba6303f756c6", "value": "24576:5cAlC0McRZiuHqKcX8nHya78EqULN0i0gQufXF2zri1rA7Hl1S4pNCvu6AIRJt:5cAUw7PnHr8fULWbcX0zrkA7Hl1S4KjB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772527193, "uuid": "947b19ed-72a3-4fc8-a74c-4fd72302d526", "value": 1482600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527193, "uuid": "d4b2fa5d-34de-492f-95c4-044661daf6ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "594349d5-16de-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772527966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527966, "uuid": "9ff1292a-ff9d-4c0c-82e5-d3eb34353004", "comment": "Malware payload (Mirai)", "value": "bf2e5bdd59217d65d9c8372545f70c85", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527966, "uuid": "faaa2375-9de5-4bb2-8e21-bd0e45855967", "comment": "Malware payload (Mirai)", "value": "6613f0240f310bedbf9633de0ef39d8883c0927f2b28ca32e272fbee89ef7176", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527966, "uuid": "7c7b0190-3c1b-4e88-9388-58b87e042d3b", "value": "T182638E73D569ACA0C08441B575E88DF10BA39D00A2A77EF69982CE254407FBCF6167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527966, "uuid": "e63ce259-1cf5-4c3f-811b-e1ba99042797", "value": "768:y/+mVIT6tauIgm97leEPL2jPg1KN2D4lZQZUHBFzsiYMiBRfZoDP6N2Cvy7P:y/PC2tauOcHlZQiCReDa2Cvy7P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772527966, "uuid": "6803f285-7bdb-4d52-9631-fe854ccc020a", "value": 66752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527966, "uuid": "946a63d1-28c3-4f54-bf8e-14fde12a8995", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772528486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528486, "uuid": "748a4736-5fb1-4f3a-b4a0-6da02e6f6a7c", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528486, "uuid": "7e45c109-4c5f-496f-b16e-15227213088a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528486, "uuid": "b8bfbec1-afdb-4f3e-9df4-8674309303f2", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528486, "uuid": "088d0e09-78a8-4bc5-b0ac-4efc4a4e2552", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772528486, "uuid": "550d4e6e-2826-4b2a-ad21-5482a0eef2cd", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ed2c194-16e0-11f1-87c8-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772528700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528700, "uuid": "c1b374bc-0003-4552-a0ad-0394ab804aea", "comment": "Malware payload (CoinMiner)", "value": "78db81639bf8af0b58427aea8424cf14", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528700, "uuid": "55423b1c-0951-4030-809a-2320ba7f89f9", "comment": "Malware payload (CoinMiner)", "value": "d01ee1d7bd431fbf228e14e6d7ede793401ba9af1b7722d0a14b4765be30bfbe", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528700, "uuid": "b3db8d13-791b-4c7b-a4f3-2c26377e0078", "value": "T14F64C021B4C0C0B2D073143804F5C7B66C7DBD715769D69B93A87BB90F303E1667AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528700, "uuid": "7fd99f77-bccb-42a1-944f-36e305e06925", "value": "6144:1Vn3fLqN8eIBzLHvSY7P/KuB1uXkF5aDABogV5+:z3fLqNmPHvX/dBA0Fk8+qQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772528700, "uuid": "eac998cb-dd86-46b1-8da8-0c51740cc4f1", "value": 313792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528700, "uuid": "05aa820f-7737-40b1-b677-e81dfef1841f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a404850a-16e1-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772529380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529380, "uuid": "a130b859-6da5-435f-804e-205d7e20e4b3", "comment": "Malware payload", "value": "6ea250d1b4ead3a22f412c74d29ac817", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529380, "uuid": "44746aed-2ffe-41ab-b9cf-c3a4eb2dab89", "comment": "Malware payload", "value": "fef0dfabe1120cc42d8856ebf2e87fd4500b69103c5b3223b1a7ad0b8fe112e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529380, "uuid": "8ba0f895-13c6-4a11-8544-5669940f1c65", "value": "T19771532577E30213B48B827077B667A92750D0A7810BCE687F8C9260CF82565A5F33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529380, "uuid": "0d33623d-3516-4392-93df-0c9f3999e1b3", "value": "48:zzV/mYMxygLdS4A5oVCsR4AmMTtVFsffI7rPRenHjDbHvI67owE:V/xgLLd9AEHmMRV6ffuPRenDDbHvIyob", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772529380, "uuid": "d1b969d0-a805-4a96-b439-159d8e8d3ce4", "value": 3520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529380, "uuid": "cd5f0b04-e40c-4c96-b464-f82d16181196", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "172b1b54-16e2-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772529573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529573, "uuid": "b07146b4-c2ac-487e-b90f-ed0e5c4606c6", "comment": "Malware payload (Mirai)", "value": "11677caeb9d88433d85e1f943732c361", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529573, "uuid": "8a921976-8c24-41e6-9284-20e363655dcb", "comment": "Malware payload (Mirai)", "value": "6258a47ba514ed17a41d868bb45914d11768be1dc7da62bac054dd9d32d8a92c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529573, "uuid": "952bebdd-8623-4e0d-b6b7-cc0c50ad48e9", "value": "T16A735C95B8019F7CF94FCAF641160D0EF9216346A6930F27B767FED32CB20995E068", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529573, "uuid": "323c0e12-8575-4ddd-846b-e9e5f33e0d45", "value": "1536:9lPx17B1r2+zOoNtHmjAh9zYFl728Jo8f9MQfaR:Xl1r2UO6BXTE6+eR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772529573, "uuid": "803137de-8bb8-462b-873e-e3a94abc1477", "value": 74864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529573, "uuid": "319f936e-aaf8-48b9-b7c9-14370dccb532", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ce722b-16e3-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772530054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530054, "uuid": "b936fd43-17a6-4302-88de-177ac4f1a5c7", "comment": "Malware payload (Mirai)", "value": "4e7972ff04ff15656b35f57671169f64", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530054, "uuid": "821f75e2-1965-4163-a4e4-04b5e5b07ebd", "comment": "Malware payload (Mirai)", "value": "f989861d8c1d0176ceed8040454829ae94a1ca802dd3ebf4a31817e71193bac2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530054, "uuid": "c51ba99a-64af-46de-80b9-281324e83e17", "value": "T170732B86F88B84FAC91B8C3050B7F23FCA31D97E4175966FEF596E35CA2790252131", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530054, "uuid": "38b041af-071f-4ffd-b64e-09d7ccaea9b7", "value": "1536:XNQhHlXSIi6kPRcy7wA5JZbMEBkK/LXdnSDCwXw7cgtR:XN6Xxi6kZcMwA9BkKjXpSDt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530054, "uuid": "acf5c5b3-9a19-4522-865c-ac50c9ee4329", "value": 74928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530054, "uuid": "1c1a0456-f8b9-4cab-85be-6a7e581b945a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "212af53c-1645-11f1-87c8-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772530816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530816, "uuid": "20d076a3-c744-4dea-9ae2-765528e775a7", "comment": "Malware payload (Vidar)", "value": "45bb3a259c36f008a8c25ff89ec9b0ff", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530816, "uuid": "22817a7d-0fcc-4e50-b6ff-118f67d2d015", "comment": "Malware payload (Vidar)", "value": "ac16b746beb8102fa45b69901a5f88d5c4289da12428c4e2fb421bc6418c45bf", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530816, "uuid": "c11e58f1-0d1d-430e-8e78-c600bee63706", "value": "T1818607AB72B9816BC21D853BC096CF40F4F771755B33C5E382AD03699A428C58F7A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530816, "uuid": "ec75644b-b0ae-4b54-a467-1c64874c7e8b", "value": "98d407ce7cb1a3b4203bb905c8b5b3cc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530816, "uuid": "d287f32f-8d58-436f-8892-d3793a887cd8", "value": "49152:3BWw3ljiKrjRxjeJXQaaD1QSy5G95iVOtD+SbZPurqwsjfLaRm/wjpkkJmxMj1D/:3rMepL1vL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530816, "uuid": "5baff67d-ca0e-4c41-bbd5-835315488857", "value": 8115200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530816, "uuid": "7ec4067c-ac04-460b-85da-687f66ad21d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1abc67cf-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (ConnectBack)", "timestamp": 1772530867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530867, "uuid": "569a5273-0cc1-4256-a051-07afafd28566", "comment": "Malware payload (ConnectBack)", "value": "9494fbaf4434a98a6c7586401f353d2b", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530867, "uuid": "9078cfb5-629f-4823-968b-477cf6dfad26", "comment": "Malware payload (ConnectBack)", "value": "80b18e4ea12101e482f9a9b0b880c2364a9f8879b9c0dd07939b841aa946ca24", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "23569ebe-cae3-4d54-87ca-c5391253813f", "value": "T162D080330B0A40DADBD4063F7574595CD77B9976574D73350C50DD010C09A445F52C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "dd80860d-31a3-468a-940a-3713aab4687f", "value": "6:BnX//In8/r1uBxHocmTH4Q3RQdygg5XJYD:BvwncrAH3mt532D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530867, "uuid": "333e6ea0-c6ce-4110-872d-b72001442002", "value": 250, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "49abaaff-0b3b-478f-a27b-123fa1ad19d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1adde893-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1772530867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530867, "uuid": "ab4a6d31-f2cb-4fce-9d1d-cb0677373db6", "comment": "Malware payload (Metasploit)", "value": "5b0bdc5dbe5eee1f523e7c3fc8d887d1", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530867, "uuid": "d8146678-8968-4098-9701-d58515596d6b", "comment": "Malware payload (Metasploit)", "value": "6a3a4b0552cc98c9e45f85eecee968c0108535b52ec0f8c5f835e7e0322c66f9", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "ca43c396-9081-4c6d-a801-82828dd8a988", "value": "T1A78229897B06D8CDC5B68179C4322D2A9129F36453724BEF67B1482A0E63FB07D2DF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "eb38ebfc-cc38-403d-9e6f-15c179520eb4", "value": "ba782605aac629a26bc1fecb2cf3b2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "daa610ed-9ef2-454f-9e51-429812bbd0ae", "value": "192:dGFuOW7Lam/qxNvZzgUuzjm+xatsJlNf6gr2PxsMKup7xofn6TD/L3dz66G7+HFK:EceV4P6gr2u2x2n4rL3w6GIWI/c+To", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530867, "uuid": "cee3a53f-51a4-456b-89f2-a187899bba17", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530867, "uuid": "493a84ca-8ae8-42d2-8989-d9f40d1fd11b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b4ad7a1-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1772530868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530868, "uuid": "d4ef159a-e975-4d66-b3a6-c8d8e671439b", "comment": "Malware payload (Metasploit)", "value": "c316be4e0d11e19936c577026d96a63c", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530868, "uuid": "65a37dd1-f943-4a15-8375-c17b41d484f9", "comment": "Malware payload (Metasploit)", "value": "deb4f380d5161558f6346b3454bc6940e448d42331c18d5897e5b584c541ea01", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530868, "uuid": "1d14383d-6746-4a17-aeec-4781ba15d5f1", "value": "T1DE821A897B15D8CDC5B68179C4321D2AA229F36443724BEF27B4442A4DA3BB07D2DF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530868, "uuid": "770321d4-35ee-4e74-b7e0-e3b5b4350708", "value": "ba782605aac629a26bc1fecb2cf3b2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530868, "uuid": "24982b01-588d-41e7-9053-9f4a6e0875ec", "value": "192:IFuOW7Lam/qxNvZzgUuzjm+xatsJlNf6gr2PxsMKuzt7ffn6uwnvdzL6GfaHtDkR:IceV4P6gr2uY5Hnzwnvh6GotgHc+jx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530868, "uuid": "49e1db62-03e8-4333-8070-70cfcf9f6e56", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530868, "uuid": "a868df2a-8bf7-4f79-80d4-0031e6a514e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bfa334e-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1772530869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "69658d3b-f227-4c60-b4ec-7b309d575bf5", "comment": "Malware payload (Metasploit)", "value": "f4194346ba76a8ad7f2b3ba380f93925", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "319fd12c-6a7a-41e3-b72a-306fe199a3fb", "comment": "Malware payload (Metasploit)", "value": "d0e6c07c094c482eed3ebe6441a1348db9668ef4f596e563ad2f1637bb5ed5fb", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "0f4004e5-a6e7-49d4-8093-166ff55f6315", "value": "T15C8228897B06D8CDC5B68179C4322D6AA129F36413724BEF67B0482A0D67FB07D2DF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "cf8f1137-aa0b-4b1b-a869-2398348b2193", "value": "ba782605aac629a26bc1fecb2cf3b2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "14900d96-c6a3-48e3-b69f-9876bcff65fc", "value": "192:oFuOW7Lam/qxNvZzgUuzjm+xatsJlNf6gr2PxsMKup7xofn6xn3dzG6Gc+HFcI/Y:oceV4P6gr2u2x2n6n3c6GnWI/c+To", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530869, "uuid": "48c94040-02de-488d-8f4c-23756edfc942", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "40cb78c3-2ddd-4d53-9a8d-4b5883e370c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c07deb6-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1772530869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "243fc92b-37eb-49e8-bd71-d6b97cc1f461", "comment": "Malware payload (Metasploit)", "value": "809e156be9744f233b184c83cb61b02e", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "77d75a0a-ec54-4933-92c7-786eb82c59d0", "comment": "Malware payload (Metasploit)", "value": "b1e7e3f50e10a731bd145b6d6e1ee38641ce30a4a2c73e8b54582de5926b3059", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "97aa65a2-94fb-4d59-9f40-c81c024c741f", "value": "T1C78219C57B06D8CDC5B68179C4322D2A9129F36453324BEF67B4482A0DA3BB07D2DF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "7d44ba2e-b5da-4ea8-b5ad-a5aca4da7f5c", "value": "ba782605aac629a26bc1fecb2cf3b2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "ae9c195a-47a2-422a-8453-ee81c73d26d7", "value": "192:AFuOW7Lam/qxNvZzgUuzjm+xatsJlNf6gr2PxsMKup7xofn6qwL9dzu6Go+HFcIw:AceV4P6gr2u2x2nnwL9M6G7WI/c+To", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530869, "uuid": "b1c19a74-3362-4933-83ad-a067385cef64", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "a0fa6f1a-8bd2-46af-a6dc-46ceb9acebce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c0e1068-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1772530869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "7f47468f-d9ef-40e9-a075-07c286eac89d", "comment": "Malware payload (Meterpreter)", "value": "7b91ea2dcb57dfd3829ee5ca75698957", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "ab39e53d-6de8-419a-89a6-6763afd1b4f4", "comment": "Malware payload (Meterpreter)", "value": "5ad5865b4fbfd641322ad9a81feef73dd5595c1a2581ddc597e2e59ef39264ff", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "33e70840-122e-40b5-92d4-a04cf3b36fcc", "value": "T19BD4A4978A1159D1CC01A0B964F17A814B1CB8F641CAC58DA73DCAC6EF0B767CD9AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "e65c4f1f-8e7b-4acc-ad14-294c3cba0e98", "value": "ba782605aac629a26bc1fecb2cf3b2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "3cd963a3-aedf-4b97-ba10-d74a26dc6f77", "value": "12288:bHLSiDbiLiOJBQmGDjj9iJTsLERQlYekzyErkHErnJV2+0tUgie6UXur:HS8s/uBtnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530869, "uuid": "25b25714-077b-4ac0-8244-87f861bee65c", "value": 606720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530869, "uuid": "0a75c718-aadf-44d1-8ed9-95c29c2f75e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c43adda-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (MeshAgent)", "timestamp": 1772530870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530870, "uuid": "21019b17-30c0-495d-a65f-55518c2625ed", "comment": "Malware payload (MeshAgent)", "value": "067df7cf197945f6aac5413e722d5398", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530870, "uuid": "f403d94e-7728-4681-9bba-c7d01aa936b5", "comment": "Malware payload (MeshAgent)", "value": "6545b109e575cc3a60d80e7155a4a5f70d770adbe96965cb7e42a2d62ca83043", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "ef4e4393-a54d-4f5b-8b1d-69049cd0a52b", "value": "T1A906AEC3BB834471F8A736B411AB53BE9D7D69530728D4C393D428A949316D0AE3B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "81ec8df8-447d-43c5-8064-65e99b4235f7", "value": "7aa58492bf5691114c98568704d048cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "be55295a-c394-439d-b350-b1475a58233a", "value": "49152:hfEV3ugKeuWoAkf6bRexQlNIdwB0pJCWJ0+1NaZPwq+5bWZPaK:hfEYnnfKthWq+1jJWZPaK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530870, "uuid": "07f09d7e-fb7d-4b0d-8838-71e5dea136ac", "value": 3856520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "ec982521-8c56-4f98-9f93-a4f3c15fb04d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c515f1a-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Ligolo)", "timestamp": 1772530870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530870, "uuid": "51f394b9-fb14-4477-b607-781305cdac5d", "comment": "Malware payload (Ligolo)", "value": "ff0a0d47229a92d95139f1d6bd8ac691", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530870, "uuid": "4a2998a1-92ef-4b38-8a93-02e5701e1c94", "comment": "Malware payload (Ligolo)", "value": "4b41f36f82db6da8767a0a1c2997c8242d80b2d10a8f1d28c252a9306ec152b5", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "49f2c049-58c7-4ad7-a99a-8fb9f86e88ac", "value": "T15C765B03ECA145E9C1AAD6358532D253BA717C495B3163EB2B50F7782FB3BD0AA797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "a3d709ec-d078-4602-ab57-f633faaeb65c", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "1ff88a92-7b3e-4521-b4f4-1ec3ee6d5af0", "value": "49152:EfbIHj1mf8NrKYHRkZz7F2LAOuSPD+6PGKHTyF+Zojp9ZetnZSCapXaVC252uwKr:EsbGcLAOfTKZ+ZSCaCBVGjE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530870, "uuid": "c50bec7d-781f-4620-98eb-8c9707f2f20d", "value": 7302656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530870, "uuid": "f7b2ea64-2c2f-4e55-b4a0-f0f2da3a8799", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dea2313-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772530926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530926, "uuid": "1fcfb8ba-215f-4daa-a88f-a0ce1d3b3197", "comment": "Malware payload", "value": "a5a240966af7c1a592fcbb8f9bc386bb", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530926, "uuid": "910d2681-7763-40b2-8620-7fd4db368430", "comment": "Malware payload", "value": "b4d245e7ac0ce26a3d7cfcdf261697a2fcb7b3eee896d2a3bcd94ae3c7721e47", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530926, "uuid": "19ec3eca-0940-4f19-bf9b-73ac8dc4cb8f", "value": "T1B0F0C92227193968FA38148DDA118E96D2A8CF3A232B2871A63D1623A622232A5841", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530926, "uuid": "60d3eb32-fa75-40f9-993c-af4687cd9d7b", "value": "12:yVuln1tLs9xkaupK9UCQHsskeND6pSzu0aW5XRCwt3:11YxwKZqIeNDMSCvO7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772530926, "uuid": "757b88cb-a6ac-4bf6-a3b6-2df0c1b06580", "value": 510, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530926, "uuid": "18849660-f7e9-46d4-b276-192bfe964b5c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "006f3201-16ea-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772532971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "460dc96f-cc6f-4269-bb39-d798c116c62d", "comment": "Malware payload", "value": "89b9d19efd3445045b64266d303364b6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "67e662ac-f4c4-4c17-8410-583bb161e804", "comment": "Malware payload", "value": "a48397a17606f701f5be19960eb1a3a84c8939f838d294672f85ca9a906b2d11", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532971, "uuid": "e8cc4447-0e64-4a0e-894f-6d0a29a095c2", "value": "T10A31548B328A91BD06224669D51C01FAFA4C5753831464B835F1C485BE013DDCADB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532971, "uuid": "a9324664-1f26-4110-8d80-68ebd9e289bb", "value": "24:w1lzUUIxdMOfl89r55uxIfF5GABkldXayhmFrvruoqOLqfD38AviBRY:mlzf0dMOmuyfFzkldXvATatOLqr3MY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772532971, "uuid": "6d9066bd-a228-4b95-ab6a-45701657ea25", "value": 1685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532971, "uuid": "74425adf-257f-4971-b19e-5ed7a3a739ab", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "009b8995-16ea-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772532971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "4eb5c89e-081f-47d0-8ebc-6317e8e25374", "comment": "Malware payload", "value": "bc24fbc8fc7ca5d1264f133a69e42bb2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "de0f7879-e3d7-4f85-81df-27a22e26dc16", "comment": "Malware payload", "value": "ba98397db3a64b70825a4decf232fb000f3ba3ef4baae8c0519ded6f2153820b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532971, "uuid": "2a6745ff-e7a9-47f1-8198-9847f94ea4cc", "value": "T1CEC423511362A9BACB3F09FC55E27AE0A5E72DD11F524F68852AC3DD3E2B7C1221C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532971, "uuid": "e7e92c13-6c1d-41c0-aed4-bbe8e9b4d655", "value": "12288:qbMyAaIew2A1XaCriCnErgX07vKV9CUPGAcSGqdJjacgWfIdmO/QD:uMVOKZ+FrjiV9CN6/dJjwLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772532971, "uuid": "bf90201e-12e1-482d-bd35-491bbc862261", "value": 595752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532971, "uuid": "f897088a-d10d-4872-a39d-629242b42137", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "038ab777-16ea-11f1-87c8-82aee05be84a", "comment": "Malware payload (AteraAgent)", "timestamp": 1772532976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532976, "uuid": "db28a716-9677-4abe-a968-d5d094432398", "comment": "Malware payload (AteraAgent)", "value": "11b242a19eb8cfc88922b3fe7e6fd047", "object_relation": "md5", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532976, "uuid": "d8d0b6e1-58c9-4d85-9f5c-93a1c8b2a01d", "comment": "Malware payload (AteraAgent)", "value": "6d0aec10cf309fac28f1e180a1f19e371db95ac9b4fcf294d3f7a2208119589d", "object_relation": "sha256", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532976, "uuid": "f9c12600-0f1b-4186-9d09-807bccacbe61", "value": "T16D862318FBE009AEE5778276C56A8520EA327C8D3720C54F47A4B6295F3B7A075BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532976, "uuid": "c4d78b9a-965f-44c7-a203-0c5b0d4be681", "value": "196608:NW/FpmnGYLnWgziirlb4/ieF3GrAfedpvCs3md8r:UpqGYLpZreF3G82yc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772532976, "uuid": "b1751668-4893-4672-bbdf-216d6b79e146", "value": 8601600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532976, "uuid": "f6ec5e67-63d2-4ba7-9575-14516215703b", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0468098a-16ea-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772532977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532977, "uuid": "e9714a72-3234-4551-b734-805a339da6af", "comment": "Malware payload", "value": "7a50af4cef2ca7a2e8297383d2105440", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532977, "uuid": "daac17a4-33d9-4f96-b99f-c85d0f76a7b2", "comment": "Malware payload", "value": "5f897f545d8826862fdfc4cf6cff38c43ce1e13da27d48f276aa497e64959be8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532977, "uuid": "757df311-fcc0-4273-9fe4-07e044e12a3f", "value": "T1128612C6F7A85D2FC8B75032896A177266574D028E83AF437848371C2977AD80F9DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532977, "uuid": "fecb4166-c707-48e1-a94d-348eb9d4d6e2", "value": "196608:FyOa1/A2LaxBXqD4AZkH6XT0vkKU5vE4u51o3:F6hAOax0DTYtHU5M4z3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772532977, "uuid": "3535a80a-ea14-4733-b2ec-b70376e7c669", "value": 7879275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532977, "uuid": "2b93052e-2dcc-400d-8467-435da2b6b391", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26e90989-16ea-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772533035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772533035, "uuid": "4a4936be-1c10-46b5-956a-63a6bbafbde7", "comment": "Malware payload", "value": "eb2ccddf0b58f26006d489764b3256f4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772533035, "uuid": "c55c7879-d323-4e24-bb81-18892c105665", "comment": "Malware payload", "value": "21cea957d9b0a37e38aaf3763d300132bf388b4e4a8c60d01da1ae02cb5d66c6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772533035, "uuid": "b5e33982-4ebc-479a-856d-a1814b7b63fb", "value": "T1C948333D6ECD49F1E46926ECEA6D014C26B6F53B750D592CB09CC8F68EAD2908324F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772533035, "uuid": "87d491d1-2b61-426f-be3b-7888a5d0c970", "value": "3145728:uDW5/kM1r/9ZrRvv6Heh7SNfx+1PjJHV5xX:AM1T9nv6Hu711jJHP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772533035, "uuid": "2b1dcd61-5577-432b-afdc-975d328d8dcc", "value": 114771264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772533035, "uuid": "29d2dc6b-f416-4300-a4c9-f6c96ddaaabd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b7c68b-16fa-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772540179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772540179, "uuid": "7e5d8b1d-96bb-4f01-b38b-20d808e2f14d", "comment": "Malware payload", "value": "ac083aebb6794c5139632404d75513eb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772540179, "uuid": "7bf35886-8921-4c64-b2fd-34912de5b1e0", "comment": "Malware payload", "value": "c79cba3383e61de35be280eb5cb0e103d24b58df36cf96ab4558b9466a500618", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772540179, "uuid": "643531af-bb30-43ba-8117-8515b9fd9303", "value": "T194F72356E2F900E8D5BBC0B8C6575517EBB1345913309BEF66A48A692F33BE06E3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772540179, "uuid": "c82b5c01-941c-4a9b-9688-5af302ef473b", "value": "70d2e884fa127843c5bcbb53da86b6c8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772540179, "uuid": "a4146e36-f4ec-4bf4-b6d7-1a89c144700d", "value": "1572864:e5WJo/Q6fhXUqH23Vxczp/FwWcMzFBbLCpRIv0D:eCohuRlSzptbcMTbLCpRD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772540179, "uuid": "1b987483-9025-4773-937a-21d24e1a02b7", "value": 73505480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772540179, "uuid": "121ac546-df27-4cc0-8d1e-42cc9cf16e42", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e4e4869-16fd-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772541369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541369, "uuid": "04b8655f-260f-40ab-a1b6-0a14fa5f4f0e", "comment": "Malware payload", "value": "62f350c9bd4815695e5fe4099211a3bb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541369, "uuid": "1fc5ff4a-268a-4ff3-99b5-e6287aac2e6e", "comment": "Malware payload", "value": "7c519ab5b4da70d36c04ed39744f99ceb52d877c107c45cf7f731518fcb2c2d2", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541369, "uuid": "cbf50ee0-348e-406c-920d-8d1c839cecee", "value": "T1DBE58D0BAD9118E9C06E97328DB7569A3B74BC0A0F3223D71E907A792E737D05E367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541369, "uuid": "a8070346-6cef-49e5-b35e-0997c9001768", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541369, "uuid": "fa6d6367-81f5-45bb-8ea4-a8a512a4b9fc", "value": "49152:Bao7w5LONovfQqN0X/wZlJw0fw2DAqaDkeCvErOr:BaFaiM8SyADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772541369, "uuid": "ed0140de-2485-4f36-82e2-c74263ff32ed", "value": 3035136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541369, "uuid": "5815e055-7cc3-4eba-885a-c7a49d88b9c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac26ea59-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772541849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ceec1acf-0145-4aee-bb3b-83c8530c53f0", "comment": "Malware payload (Mirai)", "value": "81951bd4758d495ca424ac721e97b184", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "18dfa3fe-94de-451b-a8e5-f76462f703e8", "comment": "Malware payload (Mirai)", "value": "8ecff67913822cba865d3f69777425e16c8eee250e13cc88fd2c21add4d785d0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541849, "uuid": "5ec6f6a2-6117-4f85-a56d-81bbb10ac52e", "value": "T1B37182D42370C3377CA2463614B95ED863C5AEE791D58EE0B0BA3F61C88DE4C2E947", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541849, "uuid": "386b4f3a-605e-4678-be41-e98942e925d0", "value": "96:v4BB4IX4vl41B4GTn45h40j4o54zN4sB43t4GkGO4ez4GD4kk:UW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772541849, "uuid": "6e9f4b3c-b82f-403d-9d5b-2b2bae0bdd8c", "value": 3795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541849, "uuid": "04eb9fcb-22c2-48de-8673-f4d4f97e9740", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac88894b-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772541849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "956c2ded-a089-4d41-bf32-c1c22e95d3b7", "comment": "Malware payload", "value": "c73c308a137ff7805577042cc9e923e1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "69931887-b9ff-4d13-9f38-7899e02a5b6f", "comment": "Malware payload", "value": "27d7a398a58c12093bc49f7144dac2f079232768096d0558c226ea5c53782e29", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541849, "uuid": "c507c6d6-eb81-41ba-bcb6-ee7bf9927b81", "value": "T144530223ADB764B67C5159FB4FCC3C914D8D2582706727786038B8229F12A0B7D5A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541849, "uuid": "f52331d6-6d85-4da9-9c7e-239e0b76bc8b", "value": "1536:2QuaFPFizi08jxJ8e+OQh7YcrpoQMeiFSZsEhgBSwDnub7tISsQXHif:LF+ibxJ8bOceneSmUuCIif", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772541849, "uuid": "cfc34a78-87b2-4b72-8e04-7f3e03832812", "value": 65740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541849, "uuid": "ca3c732b-0e5d-46a0-934c-5f77cfe76921", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acdb9179-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1772541850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541850, "uuid": "4f80cf75-610c-46dd-b9dc-560fadafc812", "comment": "Malware payload (Smoke Loader)", "value": "af8cf0f822a95aa93e9ff5ac119ac71f", "object_relation": "md5", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541850, "uuid": "6f2a1cfe-acb3-499a-97bd-118a34c341b3", "comment": "Malware payload (Smoke Loader)", "value": "cf79cfa83d7705b103b3baaa675cc56127e9a5a9f70684f42831886992901509", "object_relation": "sha256", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541850, "uuid": "0db77324-a5d7-49b9-8990-65740568d113", "value": "T16585381ABCE418FAD06A637388B752827BB4BC490B3263D32E9076782F727D55DB57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541850, "uuid": "9fb1973c-9fdd-4aef-b2a5-4fd00c03fafd", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541850, "uuid": "4137215c-02e1-4a71-b384-b5b59c031f20", "value": "24576:BrKhIn1U4RnPSHNigpH0nX9CCKxZxFFnf+gWtPRccldKo9:BrKh0U4RnPSHNynXQCSDdf+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772541850, "uuid": "e2a09aec-67e8-4a5b-b373-12282e9a4585", "value": 1772032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541850, "uuid": "3e5c37f3-4377-44ee-a903-1cb03a57acd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee75a33-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772541853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541853, "uuid": "ed6d8c2e-2a65-4bf2-bbf2-ff8c4e2ce26a", "comment": "Malware payload", "value": "cc6b7d9e2fd7202d55e8c06012f256a8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541853, "uuid": "56b2fa1e-6247-4903-9c39-24a58754be7b", "comment": "Malware payload", "value": "dabe22d794a19ff71c5212c391ffe19caf0542cfd68b951a66d87aca55a300bc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541853, "uuid": "b8050f60-41bf-463a-8b5f-53ff8be7ef09", "value": "T13DD1F5202DEB20DD72375FA027C8B5FF0A96E4B5282DB1F420418A494774AD5CCB2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541853, "uuid": "6438b315-e114-492a-be17-52e4452b4a84", "value": "192:SZRbhQdI/bhQC9vTcOtcgn3KDeO42VCJcQRciVCF6GncMZ:+PtFFTcOtcgcZV2cQReF6GncMZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772541853, "uuid": "ee90d289-2ff1-4df7-aafa-3a7b74b35d23", "value": 6304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541853, "uuid": "af3fd667-6c81-456f-b6ad-7b92d116b9cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af12ecca-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772541853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541853, "uuid": "04bd04db-bd3c-459f-9850-f384a8ca8654", "comment": "Malware payload (ConnectWise)", "value": "b27f8f4b32e859f156eedb9c813e9404", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541853, "uuid": "2b2a33ad-bf8d-4e02-8635-001267d8f058", "comment": "Malware payload (ConnectWise)", "value": "304b7be7acdbae7d8073d41e5540b4078cb61a8558fcfe5253c2fe5b715f77da", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541853, "uuid": "7ab90162-26f6-4bfe-b92c-657592f65e12", "value": "T1B6A6237127F88429F1A75B39EE3A89E229387C64DA26C05F17B43D0E1971E509B723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541853, "uuid": "68583779-7daf-41ff-871b-22167ede77dc", "value": "196608:/KaLNkbgci4QSKaLNkbgRKaLNkbg7KaLNkbg:XWgciHkWg1WgzWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772541853, "uuid": "20fdcade-a195-4ed1-be8b-e4bbef37b174", "value": 10072064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541853, "uuid": "ccb94dfb-985d-4d0f-8cfd-5ca29b01067d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6026cbaf-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "268573f2-3ee9-48b8-9ae5-b07d0875820e", "comment": "Malware payload (Mirai)", "value": "82e7a3cdaf2d20c75a8c3f9051c95444", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "f5f14da5-787f-48d8-8a86-e0cbd4f9601e", "comment": "Malware payload (Mirai)", "value": "e3650610cf482af4b833da6cd86a1c72953f95410082c0a0607c446b14330e88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "b13614d1-deb6-4616-87c9-194e907e4301", "value": "T1D3D31A41F9504F23C6D622BBFB5E428D372917A8D2EF72039D256F64378696B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "450d29b0-d6bc-4970-aa8a-5104941217a1", "value": "1536:hFN2l4G58dxS6Ha0El2wgAcW0AEGL4V5ilT6IJEJ4XVbOl1qTo9IYfJ+ILl8+wyQ:hFN2PshEutW0C46lZJEJ0yHaYh+9oG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "164fd5ca-9228-4f82-a482-f1f0d00a5a14", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "e94e6c16-8684-4d9d-8002-2a9289fe391a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "602fcb43-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "11e773a9-d2a8-4371-ac8b-42667e566c31", "comment": "Malware payload (Mirai)", "value": "14da8b2dc1236f3ce260999972454ec5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "b9250c30-cc82-4008-ace5-4479bf89b321", "comment": "Malware payload (Mirai)", "value": "428f5e0e69e275aa7cbb1d5be1effe6f0683cf695de6ac693f767446f64ae297", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "6bfe8c8d-496e-4f69-9f90-e14053b64f5e", "value": "T144D34B06731C0947D2632EF43A3F27E193EFDA8121E4F644355FAA8A9671E321586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "af3d2207-7c62-42c1-8d5c-dd224f73156a", "value": "1536:fRkySkzFFQSI2YIVxfjI1EPF1IQYVA7ikr4trvArjrE2+N/NuqNnRsI0:fNzbYIVxeE/v7Xr4erEt0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "80d721cf-a2ee-4fef-9e62-672305144382", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "398c0b0e-0f9f-4ce1-bd93-3be6a010f6bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "602ffa64-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "87e45c4c-640c-4556-9be3-7b705d30e46f", "comment": "Malware payload (Mirai)", "value": "ac6fda7bb0add7c2ad481c4464ac2595", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "f53a77ea-678d-44df-a87a-f34d8108bf60", "comment": "Malware payload (Mirai)", "value": "37f948633ddc2f57265c48103a72e30b31ac096381e31a4ec8f846fceefd3d08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "b94791c1-cf19-426c-8fd3-ab875f99dd00", "value": "T194935CC0F783E5F1EC5701B5A137E3339732E039502EDA56C369AA27ECA2550DA1A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "6899d544-e8aa-449a-be5d-a631d05cf661", "value": "1536:tr6dfMqjhWebH868H0lAeVq/Lv/EL6c4eW+JIptgv49SQflbsg:trifMqtWebH98UlAeVq/bC6YW9tD0Qll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "2312840d-3eb4-4345-af57-3e8b1af586da", "value": 92812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "731de729-a04a-4afb-9598-ed639f590203", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6044cde0-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "4941b22c-389a-48f7-b94b-40e5ee1e9f5e", "comment": "Malware payload (Mirai)", "value": "0aad6da593bb4631371691c5cdccc98e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "73514180-88d4-4dd7-9a3f-c4b79e4f23e2", "comment": "Malware payload (Mirai)", "value": "0bf3d9d543f72b2b42f1cd0c64a2e08840eb6b892bea2a4b63ea57a7b321963f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "498a750e-1482-49f2-8b80-c99603f2473c", "value": "T1E9D33B07B6D180FDC4D9C2744F9AF13AED33B1695238B26B2BC4AA171E89E309F5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "ce229ddc-a9dc-4526-a8a4-f8e10825dfa3", "value": "3072:+Kzk/bIs2eUkmx9nzYZPRZ9tIX5gDCCuD3pIE9fu8vB:+Kzk/bIs2eUkmfnA6lZM8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "db9b31d1-a784-4b87-bd26-bfbc151d65d7", "value": 141288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "1976b1f4-499d-4b2b-bea7-42446bec4dee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "604a96a6-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "9d2a42d1-a94b-4ca2-970f-7ad915424fe0", "comment": "Malware payload (Mirai)", "value": "831e8a637d2ffa72baefa58ba7c2e54b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6076687e-9bfe-4bcf-aa20-daec42d98831", "comment": "Malware payload (Mirai)", "value": "eda08b4a54e85d2f4be08f61e04c7b1b5f162dbc22b2d27081d301006632d281", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "2ae6e4d8-fa32-403f-a6c9-abf93a02b924", "value": "T1C4E34BD7F800DDBEF80AE73748530909B630B7A215921B372257797BEC3A1981967F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "f1549a75-ea56-4716-93d5-368cdb13b871", "value": "3072:KqRWWxXUM9Cyw6j0Z1DE5WY6tIL2yVxjbiqL2N7+oK0:KqnEywA0Z1DGWQL2mL3oK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "b0e45fff-9183-4c8e-9c0a-60084f8ccc56", "value": 152864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "685a2092-cf5a-4206-a995-d780c5899aa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "604b9008-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "cac45b4a-164a-4f04-aa98-e505f15aaa13", "comment": "Malware payload (Mirai)", "value": "d8fa0904548edd9bcad3c0732ae0b172", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6eb0b3a1-9c40-42c8-89c5-8426f0235eb2", "comment": "Malware payload (Mirai)", "value": "b1b48c59277897110710f78544943f8495a3cda4c907bd38c9aa5abdf0bb6fa7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "27645282-1ad4-48ea-bd31-24549e003c60", "value": "T129C36CB3C8666F58D559D1B4B0608F792F53A91182871FBE2977C2B68083D8CFA053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "eac3d273-86e4-4580-b281-54e395fec152", "value": "1536:75KpJ/jGeQvZzfXn0FyCucKsEYoeTiT6Hk9pAWvuoFPocdOsn:75EJLGes0Fy3DsHiGUpAW2QP3OG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "168cc677-75d7-4607-8f1b-392daf66aed6", "value": 121664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "27d41ddd-cf3a-4aef-8eca-f42e072a6ce2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "604cfbf3-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "004a675c-4e7d-4cb0-84e8-5566043aca99", "comment": "Malware payload (Mirai)", "value": "e0af743c60d17abd266f1541d027de13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "ef844063-abca-4070-a3b5-b7f6b31a6f4e", "comment": "Malware payload (Mirai)", "value": "39022ca617427980136f400ec6af4af23f5d24b0f2c95e2818bccff916a8d339", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "f56ea7ad-aba5-46d7-ad78-e4926b0178b2", "value": "T109E30A46B8819B12D5D111BEFE1E128E33231B78E2DF72029D246F64778A9BF0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "a23ff686-f8e0-4292-86c6-a7d782308cd7", "value": "3072:b8S5cURgw/PXuxMte/aSyuBwSQm9T+cDmbtZ:bj5cKZPXmMtwa9uBwnLcDmbtZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545587, "uuid": "bd1cb31a-b105-42b2-a924-33dfb6a088ba", "value": 146268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545587, "uuid": "ed0a5405-ddd9-45bb-8713-7b4a7ad585c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b552d5e-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772545632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545632, "uuid": "0d453c1b-9711-4990-8912-b5f070f0bd98", "comment": "Malware payload (Mirai)", "value": "1b8edbacefe36a48d301d8c22b57a548", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545632, "uuid": "f78db0dc-f5bf-449d-8717-39da1376f5e8", "comment": "Malware payload (Mirai)", "value": "beacd3c4fb5b099e917368a0cf3da91c63e740ab299b1d8c1158cf8466d7b5dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545632, "uuid": "294a0010-90d4-4897-b81d-90522b8c182f", "value": "T135D32A45F9404F27C6D612BBFB5D428D372A17A8D2EF72039C256F25378686B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545632, "uuid": "2146a137-69f8-49be-88ea-96d7b8592318", "value": "1536:K1qNEWQs5j9vlxHBha8OAJuu4VqZh1TmjUThScVnO7DIjdxKwWuAcl3/wyw8YBFu:K1q5NPo8Ou4GvCUThlykY2nYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545632, "uuid": "51b5dead-afff-443a-b768-d330b5074a5d", "value": 138016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545632, "uuid": "04acaf4a-04a9-437f-a96c-c26602e99505", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af4fe5ee-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772545719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545719, "uuid": "1416a470-514b-4d56-995a-d8011068b71a", "comment": "Malware payload", "value": "b4ba1e8eb82799ecfc0366c6a3f641ee", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545719, "uuid": "01bf5914-034a-4173-9380-06210a2ba393", "comment": "Malware payload", "value": "fca8a76b019f76684de7258cb9bb70193e54f5e2e2b70321bacc2c5dd786cb76", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545719, "uuid": "620a17cc-2c07-43a9-aa9b-4f7fac9c6584", "value": "T17F921E903F1179F06D6CBBA7AC05ABDC5C38395D62355EFE006B22CA88AF5C371634", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545719, "uuid": "36de4110-1cb0-4f9a-a9fc-72993fd4eba9", "value": "192:t0vcaCcCYnSfFAmH2JGVcYQFd2WS2Q3h6N1K2/3klkykW:t0UemH2JGzQDnScbKpl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772545719, "uuid": "6c5a3fe7-e001-4dbd-979f-4cb81abe7471", "value": 20006, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545719, "uuid": "46582ecf-4523-405f-8aee-b6869a042230", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b263c3-170a-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772547118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547118, "uuid": "c265c34a-e077-463f-861e-705a824aadeb", "comment": "Malware payload", "value": "48533b48c258e9fd90a729b04f948520", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547118, "uuid": "a355dda4-b5c8-41cc-a9e4-8dc86a14ce3c", "comment": "Malware payload", "value": "888df49091a3f752de444e87309346a41251373ee089875d89a91087fed3a00c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772547118, "uuid": "770a56fb-a987-4f77-9648-e36f63220f34", "value": "T1668308327588582A210B428FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772547118, "uuid": "46b465e6-980c-4d41-92cc-75a58dcd0fda", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn3WaHVN/:XEKltp9t2SX/yr2pb3WCVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772547118, "uuid": "d5fe8a00-7d60-4db3-a836-0e0711f6c3fe", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772547118, "uuid": "b2ae1051-b35e-400a-8a1f-794e62e3f49c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772548233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548233, "uuid": "9aebd9eb-6d85-407c-be9f-9960af6711b1", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548233, "uuid": "701b6d83-181e-49d6-9bfb-e2a675ce7137", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548233, "uuid": "fb741b4a-68a6-4868-8900-a227d177cb5d", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548233, "uuid": "9837c04f-3d0e-4b5f-b333-4f06b20b98b7", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772548233, "uuid": "a1bd9ab9-6487-4935-a218-2955ee46634f", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03d31071-170f-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772548868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548868, "uuid": "80ed16bf-b479-4eaf-a924-fdb9ab8a6b0c", "comment": "Malware payload", "value": "fbb1774b74401032ca9a86d9811dbaa3", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548868, "uuid": "9f25fff5-01ee-4f8f-8d04-4e147a40c6e8", "comment": "Malware payload", "value": "90a176a6f1a4459b9390ebfa2ae0a7937f15d655ce5f4834ba2edd264afc8f19", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548868, "uuid": "04bdf64b-2961-4af9-b0c7-6d3ad8bfee8c", "value": "T13A3412A13A3A764AB07D6197FF3711A250F759030FB3174AC7A44F66062B62EDE301", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548868, "uuid": "4cf9cc01-f79e-423e-bb21-d206b0e7959d", "value": "6144:N//KIOweDafgySl07aOfTLaPBsKrAGh5MSrCh5ZD:NakeDaoZ07aOfTgsMlfr+D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772548868, "uuid": "714a7e12-4ed1-4290-8708-3c7ee3a79f54", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548868, "uuid": "3237ae4f-194b-499b-a938-5eb4c9a4521b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03ebd19c-170f-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772548868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548868, "uuid": "b801cf65-4aff-471c-bf10-a7f56d1ca4f6", "comment": "Malware payload", "value": "4fd3dd6c362abde28819f8d41814016b", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548868, "uuid": "a6a89a8a-fa09-400d-901e-7709fa0d0f25", "comment": "Malware payload", "value": "905ce3d9bb6d5e4e58b1d9e2dfa2f649aa43bc458c17f9eed2dc36e86dd7a223", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548868, "uuid": "07aa1454-6e9d-413b-9cb4-47cd7e9a9305", "value": "T1B534124D25CD7DF66E28A1A07D22ADE65671BC2C9088CF98396B0B4BDC5CB1086CF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548868, "uuid": "ba30ef00-b70e-4010-b889-ae8459515f3f", "value": "6144:AWREFinUP8nOUHYBrz/NyGUpQ26NLBtq42rh/l/B0qf:0inw8OU4BfIGUpQ26Xtq4q/pZf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772548868, "uuid": "ff5b52f9-0e5d-4026-b5d7-6fafc4c1eaa8", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548868, "uuid": "c1daeb42-2cc8-403a-ae52-dd0c5a71c648", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26fea128-170f-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772548927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548927, "uuid": "3fd60199-67c9-400f-9bc0-76bf0e40be12", "comment": "Malware payload", "value": "1f3ab2f5e050997645dc76ec8e63da26", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548927, "uuid": "f0566cd2-73e7-49c6-9984-8da9fa78088c", "comment": "Malware payload", "value": "0776955743767dc24f4527a36c50fa4f75af4e2f7d17928616a7b4bd68d437d0", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548927, "uuid": "628a5484-9f0c-4624-ab57-2fb3b773488a", "value": "T11C34122A93098D8FF18077E02D051ABE5F663A4DCF7B4F6504E5C951C8FC666E2AC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548927, "uuid": "1729d69b-1593-4733-9015-3697c8b754af", "value": "3072:YaWAFyVryF3nSfljh6PJ1U4T0B4XdxKfnc3DkdWjOeAU2rU7b5vXTp4sCrznXM2K:HqryWxsPJ1Rd0icBrAbJTgzK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772548927, "uuid": "0348d35e-e8f5-4538-8ad1-8c4014a8a195", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548927, "uuid": "025c7a27-ff0f-4bba-b268-6104bfa94841", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27385b65-170f-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772548927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548927, "uuid": "82080eca-2415-4ea9-b9ae-a37cc5e6aba8", "comment": "Malware payload", "value": "a05ed78306338a54605a56b3e5adb2d8", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548927, "uuid": "6875bfb5-ccb3-4c25-8b67-55a738361add", "comment": "Malware payload", "value": "0f0486bba8e3b4f45e49b9d5c9aaa1fb334effee632c40b9b98b37c62caa2b1e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548927, "uuid": "59fcccbf-c183-4916-9d78-35e9c55efa3e", "value": "T1763412DC1B915A400731D7C6B223CD8E15736524BDAD02CD4D1296FC6FAAEBD03BB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548927, "uuid": "631e4c9c-ce5e-4d88-bdae-cef601ca1bb8", "value": "6144:7I3I3cIJmxWdJhNzhZXSFtoe4iVcvoh+rVZKFqdguxN1jh18rm:7Nss6mJhNXY+wVcwYVZlNRh18rm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772548927, "uuid": "efdcfc94-a04d-4581-8859-0d2b339237ff", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548927, "uuid": "9c67a017-e762-4e3f-9e54-4f4204a2c958", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b5d2ee6-1710-11f1-8e4c-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772549525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549525, "uuid": "a1d2023d-a846-4c00-96b5-f479093954b2", "comment": "Malware payload (AsyncRAT)", "value": "907234ac22c7e501a5f8ccf86606628d", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549525, "uuid": "cf7fb352-494b-4b9e-8d15-5c4f94887d45", "comment": "Malware payload (AsyncRAT)", "value": "aecfabd96b0551eae1be95dee23e6028d3d3eb04dcaf8fbdb55783d219a40731", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549525, "uuid": "75103a60-42fb-459f-a9eb-aa62e8d34e4b", "value": "T159461313162D04F1419E1DFD0BDCBE2D8B3695E76AAF743A64820EF691F41C8E9730", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549525, "uuid": "12168525-e7da-439e-a7f8-baa9133934a0", "value": "192:C8J+EJoJAPoJxGJl71AU/zGaQ+0iUJ/J34DXN:9zGaQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772549525, "uuid": "47cf166b-9904-427b-bb03-5f4cd97017e9", "value": 5775793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549525, "uuid": "261f58d2-52aa-4126-9234-7985a948594f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7325d7-1710-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1772549630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549630, "uuid": "be307726-29db-4f06-98ec-d98523d52e21", "comment": "Malware payload (Smoke Loader)", "value": "36ff08aa2c7589a56368d7bb7c76553e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549630, "uuid": "ed5375bf-9279-4055-a886-f113c0ffbfe8", "comment": "Malware payload (Smoke Loader)", "value": "b1f0e9cacd5a27e0cdb5cb9cd259e62bfdfecdc96fee2a7a7a345cc97a7fc60d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549630, "uuid": "cd52212b-9114-4f3a-bb3d-ceda5d5af498", "value": "T12F945B217916C032D66292711F79FFF584ADB8259F7109DB7BC00F7699202E26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549630, "uuid": "c8038f5b-907f-46f9-a3ba-2c2f324d0de7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549630, "uuid": "5bf1f535-eddd-4a88-95ad-9aa0634c96e3", "value": "6144:QbDHF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fms4AOk:6HF0VKkWrb4QDwR4QWdyzsAlWZBR8qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772549630, "uuid": "68da12eb-d400-43c5-8fb9-5c94c89593de", "value": 444928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549630, "uuid": "e05c57e4-a2e2-40c4-bca6-c12cadf4b46f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "476093d3-1712-11f1-8e4c-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772550269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550269, "uuid": "62b1901e-00dc-4491-84c5-2af190046254", "comment": "Malware payload (RemcosRAT)", "value": "1e41cbfac881161d0bcbe6fd1f48a815", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550269, "uuid": "babf259a-edfc-4dfb-882e-ba6ab690c759", "comment": "Malware payload (RemcosRAT)", "value": "8262a999b922f4db69bbae6222cd1ba9862081306539cd1061e17085010cf89f", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550269, "uuid": "a33dc23e-1898-441a-afe4-bbcafd8f0989", "value": "T1A046126FD95B50287E708207FDCD61E92DA50AE6309BFE46496E83EBD703056424CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550269, "uuid": "e68ff4d7-7475-4eb4-ab97-10fa205d02ea", "value": "48:awfgC323ZwR0YBHplc92ZSpOHfZHLYcpwv9YtnYfWZjRCzCOxT58D4kH6KC2w2BJ:Nkq8t4MKNQ5dL/p+KUYZ4FT0bYZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772550269, "uuid": "f3979a39-ca32-47a1-a194-1aa97bf991a4", "value": 5599617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550269, "uuid": "c7d3aac7-890b-47d8-b597-ed4d90f36cf1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21fa9ccd-1713-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Babadeda)", "timestamp": 1772550636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550636, "uuid": "ebf7ead8-eacc-486d-9d17-e6653579c22d", "comment": "Malware payload (Babadeda)", "value": "a5a28f826c387c49e2e7bd353948d3dd", "object_relation": "md5", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550636, "uuid": "23bb16b9-1909-4222-a0a9-4633bbcb0b23", "comment": "Malware payload (Babadeda)", "value": "6de74d9e38c026c4f3c4181545a8e92ffd35e6a5caa10619e362e258ce26fc89", "object_relation": "sha256", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550636, "uuid": "f4d7e315-298f-4273-bf39-183288684d77", "value": "T16AD533797DCA83B7F5BA083300E06559BB613400EB61AFBBD728BA1292817C5D17D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550636, "uuid": "34ba2c64-09a7-4bdf-a2ed-fd3f8dd5f571", "value": "2c5f2513605e48f2d8ea5440a870cb9e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550636, "uuid": "f781894e-6a36-43b7-8789-5426d27adf7b", "value": "49152:eS2Tv+4C9l6zd24gHlfBtu4O1MM25DofjNhxSprkA7ICZPWk8sbvVtOiYT+hF:30C9loiFfBs85Dohh4p+C9NhbvVtO5yL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772550636, "uuid": "dab12b4e-bec2-4bac-8ed2-5587ba0999cf", "value": 2761728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550636, "uuid": "8d2b189e-aa13-4b17-9711-55b5fac68ff0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c65b4d2b-1713-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772550912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550912, "uuid": "f7b9824b-944d-46d9-85a8-58c9ad27a519", "comment": "Malware payload", "value": "ed388ed14833372482ae5b5bf6424451", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550912, "uuid": "9ff3c660-a1d9-49d6-ad63-05140910a743", "comment": "Malware payload", "value": "1c5eb64bb41d1561d7cebf77fe34e394401cdf76d169c48c303ace9836ca46f0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550912, "uuid": "0cf287d9-9c49-4e05-bd2a-b7daaf6710f1", "value": "T12355C0F61607ADDF5B6B0D50F4081714ECBCAC97B2D895ACBF480EE61A96418CCB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550912, "uuid": "15c9780e-7179-4cd1-b668-2f712e88c1a5", "value": "24576:iZMRC1ojRdMd/lGtF2uJSBI7ME//2j0Zon7RUBMVdNM0qchyq84:3RC1ojRdMdNWcc72oZy7mGM0q974", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772550912, "uuid": "80a078cb-525a-4fe8-9a0c-3ffd1ec47c91", "value": 1299390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550912, "uuid": "e2317437-db96-4e0e-bf82-193446aa3a3c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ca7a229-1714-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551030, "uuid": "c7f1ca9f-2857-4533-b253-b531faabe871", "comment": "Malware payload", "value": "a04fc13b4e0e98ded1321fa2a3bdeede", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551030, "uuid": "3b8b6261-0a61-4438-92e0-8c6c100a997c", "comment": "Malware payload", "value": "e7432b84af4ecad42a2b471cac59f616193781b54c3f0632d9ab37035dcfd085", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551030, "uuid": "80cddcb7-61a6-4e30-8c39-b48408d38e9f", "value": "T1B755B0F60607AEDF5B6B0E50F4081715ECBCAC97B2D894E8BF890DE51996418CCB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551030, "uuid": "45f7d5cb-8e4c-4de6-af49-9221aad59ed3", "value": "24576:WiAHMFBnQGw5PUJSBI7ME//2j0Zon7RUB2VdNM0qchyq8z:mHMFBiI72oZy7mwM0q97z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551030, "uuid": "18a03180-0ce0-43ca-aa5b-499af9716a52", "value": 1302792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551030, "uuid": "66e694c7-dec2-4f75-9eb4-06850d3d7a6d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e2c4b35-1714-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551032, "uuid": "6070ad32-65d8-413f-8ff8-791bacee4993", "comment": "Malware payload", "value": "310a63f18356e1be11408b8e19e4a4b2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551032, "uuid": "00f18292-3361-46b3-8091-39d800862bb9", "comment": "Malware payload", "value": "4e49ed6ebce1d578219c6f8ce9111e729bac2419749f8ab1a1432051104df21a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551032, "uuid": "06a2ddc0-2f44-419e-a4b5-25096e434715", "value": "T1AE55B0F60607AE9F5F6A0E50F4081714ECBCAC97B2D895ECBF490EE60995418DCB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551032, "uuid": "e7a24f57-7cc5-47ba-b54a-f6ff07457428", "value": "24576:rZMOV51ojRdMd1x0IIGJSBI7ME//2j0Zon7RUB2VdNM0qchyq8I:WOV51ojRdMdUE72oZy7mwM0q97I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551032, "uuid": "c293562b-f046-456a-a004-46b9526bff1d", "value": 1302128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551032, "uuid": "23dae349-70db-453e-b0b5-dd74ef28632e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "816462b6-1714-11f1-8e4c-82aee05be84a", "comment": "Malware payload (VIPKeylogger)", "timestamp": 1772551226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551226, "uuid": "0e64e75f-8cfc-4518-881a-e2dfb78f234e", "comment": "Malware payload (VIPKeylogger)", "value": "4dabf5fba9e3b4458ddef17ecf73ca67", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551226, "uuid": "58b76bb5-b436-4a65-a4e8-4987d50930fb", "comment": "Malware payload (VIPKeylogger)", "value": "9899fe72ae403fa3a68ea803f410e50db67918a96a080bcebe3d947148d81cd8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551226, "uuid": "e9985ee3-2651-4e8e-a5c8-bffad0268da7", "value": "T16D6612F25246BDB51A6D0F00A05D3FB61CF86DDF8178B1A8B98C25CA709D7E1AD1D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551226, "uuid": "6d842871-d910-4573-b3cf-78c22e27e404", "value": "49152:TQV0f8KUiR8r9hocKsuYaN84LjI9S8pY/OKkz7nNTwPvfPBhhNERyT2WX3NWN/aF:L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551226, "uuid": "b23e0fda-1983-40aa-961c-5173dc306e77", "value": 6653899, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551226, "uuid": "1db889fd-46ce-472c-8751-4157b7065a9e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54480488-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551580, "uuid": "1d9d0e0c-d0cf-4f17-a555-859a9eb0355f", "comment": "Malware payload", "value": "81d197f96de4bd96b205648caaee1275", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551580, "uuid": "2d350ada-675e-4202-9a79-c0e91342e6ed", "comment": "Malware payload", "value": "234827b359ce897c7abe3f7f98ce0f3fbad0166c8b5f394b2920e35fea7456bd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551580, "uuid": "eb772b31-9718-48b2-b3de-0d908f010169", "value": "T162058CBB4372CE9A1F6D1FA49504068DAC68DC97E5EC03FC2F439C7582F65805868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551580, "uuid": "a6488b09-bb27-4fda-8319-dcb9cb165e66", "value": "24576:oXpkhkqqGd1dT8K78xyuOZDiNgFbM7f8ZsRh:oXS1E6iMW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551580, "uuid": "65702287-9ace-4940-9942-96f714670c34", "value": 865320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551580, "uuid": "3b36bf08-45e2-4f27-868a-d88d0a0a3e3e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "724abb6e-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551630, "uuid": "6dcfb537-ea32-4b0e-88ba-6bf8d6609062", "comment": "Malware payload", "value": "d4ac745ba9b748b0c175ad91616086b8", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551630, "uuid": "9af639f1-e49e-4e3a-b0c4-863cabe1036e", "comment": "Malware payload", "value": "b751ca693dcf93e299989d1020b1761c37229fb660eb26e544c14fa75cb31eb5", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551630, "uuid": "6632ab96-9523-4067-85cb-9ec32e218f8e", "value": "T19DD56BA688B1FF13B7AA4E5873341E5D1014263B0FCB110AB4BED7C67683A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551630, "uuid": "8562828f-76ee-4852-b3ab-4d5cbe5b8ab6", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTzp0Lcmpw3xQ:m0eF4xaDjDONijDG8ZxFTk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551630, "uuid": "0b55b1d8-bc01-4f04-90fa-d66a16fb4496", "value": 2919968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551630, "uuid": "e73db39d-288b-40ed-be1c-684db747e7a2", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2114323-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551817, "uuid": "1bab3006-30f7-41f2-bd92-b6551fd6667f", "comment": "Malware payload", "value": "adff473229954d79ce711b8d6f32adc7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551817, "uuid": "0856d958-97af-41a1-b639-af97f6260aef", "comment": "Malware payload", "value": "093d3e386da4eaa944bfbadc07ed91bb34dd2b208a8e28801f6fe77c6b704ae9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551817, "uuid": "de4b0b34-b179-46f1-bb5f-10249938cf07", "value": "T142B3E4731253FE9B4B730E41D4093651DCA8657FBB2082ECBF8615C646EA958CEA8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551817, "uuid": "e44fb4c9-01d0-4ba4-85ba-1c2128421e5d", "value": "1536:mu0Mwfp/BZV/Ijdzetwy0k6RK6+igDocpxhBDemvZf5jATOJlo98JPnGiio+AJ9z:mu0vfphIjduSKjiio9YPFPTLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551817, "uuid": "9dd2f723-6ec7-4a49-b7ab-39027859ca6f", "value": 111966, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551817, "uuid": "44b68f6b-8b88-472f-bcc0-ff17a6b1c0d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c62b75d-0844-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "3eca8718-a5c7-4f03-b136-06efb9fbe3a8", "comment": "Malware payload", "value": "aa687445fddb011885ab56ddec5c787a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "9b6e92ff-094f-46a2-a28a-34f000fb8227", "comment": "Malware payload", "value": "b07ea599ac7adac9245ad5090ef621f96ce38466c8289fb52dd650e18dcf73c8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "f6800f6b-26b6-49ba-99ca-e2f49314755e", "value": "T15F7418FA12236D8FCD2A0E40D04D0217DC74B8BF71F85598FE4496B058AA658DDF1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "4773300f-ae79-47a0-a63d-3cc445c91481", "value": "6144:n+kHMT68tTMWE/ilDJRKGIqcKzu3rHjE3Rm/yKX9L:jHMm2IDwRmaa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551872, "uuid": "68ce4d24-74e1-4845-ac75-e34d45178a14", "value": 363872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "44a3ab5b-92ea-4b8d-b4ac-36e3e68566f6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0276275f-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "481af7b0-d5e3-4342-89ff-1fd4dd483d20", "comment": "Malware payload", "value": "81cc093ab68eac82c6fe48abcd42787a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "62d3ee14-a81f-43eb-978d-99f402409f13", "comment": "Malware payload", "value": "ed5b5401d8e2755fba916b2561caad33a7cb3948ec52c32ff64a57f66f16a0f6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "2dfbe06c-6419-4ce7-878a-3c4a5f7fddf8", "value": "T169D319730253BEDB4F730E45D0082595DCA868BFBB2482A8BF4249D645EA558CEF9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "f5666443-814e-413d-b084-dc7b52607462", "value": "3072:86AyedV8zouCpmlVLdzLtUuSrSH4x8WHSHIa4Eln:OP8EuCpAdzL+lqS8WHSHIa4Eln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551872, "uuid": "8b1d87a2-c8eb-4ddc-9735-d125dd5b96c3", "value": 140634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "99fc7a83-dc9d-440d-bbd1-2adada6bf20f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b5bb39a-0844-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "aa12f228-a10f-483c-9c04-61b05b2f558b", "comment": "Malware payload", "value": "2427ce2898f86f949069445af6e58a61", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "8b844cd9-941b-43f6-b1ee-9bbc1ff8d6a5", "comment": "Malware payload", "value": "f9ea2d9b7a8e53039ff11c62f266b8e4913cfd494b54b74716da276777aeca96", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "8937fa87-6eff-48bc-8909-c6aeb6184c26", "value": "T1377418FA12236D8FCD2A0E40D04D0216DC34B87F72F85598FE4496B058E9668DDF5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "d5737539-621c-44fc-91e0-855868fc33c6", "value": "6144:7VvooLlZOEc0iVkubNEDrq4C3WifACJYF4HORF+QlhI:7Vv0R84OR4B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551872, "uuid": "092e6040-0a64-4d6d-a3b3-f62c42b56d46", "value": 363870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "4e203fd3-c941-475c-853c-6a04edd02f93", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027a0f05-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "f85e7a8d-a7c6-4005-a3ad-3d3370fa3003", "comment": "Malware payload", "value": "8237f0a87877db69379ebb90f652afee", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "462145c1-01e1-402f-bfb6-f752e4eaeb2f", "comment": "Malware payload", "value": "7571c0a8568b366fa27987702bd54c1a408d5177af9c83aec9a4ba69aa9f181c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "6c3cff4a-9ce3-4af7-afb2-00f49a5cc050", "value": "T150B306731263FEDB4B771E40C0483541ECA9687FFA6092ACBF8205D685E5958CEA9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "246cc8bc-da3b-4de9-be6f-5fd353730134", "value": "1536:YRa5tw7q89HbTZh6Un+7ZzMV8Gc2qLqjFbVb3AeE8mrcNE23lsOV1tyKiTpJzwGu:Yw5yqKf+d2qOfEkBf3iUM63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551872, "uuid": "4fdf7208-7301-47cd-8a28-fb0722d62cce", "value": 114696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "c26cd964-6f01-4283-ad2b-9382ca17874c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0283fae8-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "d3945fa9-cefa-4054-bcf9-ebb369478c8f", "comment": "Malware payload", "value": "11a9917217028438f2a01ff78e67ed03", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "c40832a0-a918-41c0-828c-c70e67792eca", "comment": "Malware payload", "value": "2b635a3f38de820b964a13cabce830119d97d69050b262a1d20436836e4acefc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "c38e4bbd-f8c4-4efc-9f64-98b81ea86be7", "value": "T13925D0FA56575E9F8A2A0D65F40C1301DCBCBC9772D880B9AF454EE64DE90488CB4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "f29e9c94-d1aa-4cd8-8eaa-20ea97747452", "value": "24576:PnNCBaOJVz2obbdZdNoRcm1rSV0Hy9yJFB/SRTK6R:PWJVz2mlSRc3TK6R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551872, "uuid": "220991c5-6204-4d91-a02a-c94190bed092", "value": 1001166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551872, "uuid": "589dce87-d0fe-4951-849f-06cbcf047b65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02e22e2c-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772551873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551873, "uuid": "7257755a-7705-4aa4-aeff-dfc468819e17", "comment": "Malware payload", "value": "d35f4b9bab0699f6b03fcb53bffdc031", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551873, "uuid": "f75965f9-ae62-454a-b202-ad753a86d403", "comment": "Malware payload", "value": "12d3dbf8b0c810c03f0d9376c32f1bc60baffc4c4faa67819ac25020cb7ceee6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551873, "uuid": "dc3eba8e-5a30-4325-8e44-2925e431a31e", "value": "T1C025EA3B43B66C6E5C790A84E0742A902C5A0ADBDDB0E18A7DC1B1B453F687056FF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551873, "uuid": "253c4719-81ba-44b0-9a8b-99c78522f061", "value": "24576:6Kmo2i+SZUU3an9DbFKrgOsJNCowmjWHdYYDfkgl+GY/EWVoTAAfETncCVGXDdmg:6Kmo2i+SZUU3an9DbFKrgOsJNCowmjWR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772551873, "uuid": "7238794b-9011-4eb0-9328-090b5820e31c", "value": 1015908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551873, "uuid": "a3441961-fc3b-43e4-a920-b66b862918a4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f98e82eb-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772552286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552286, "uuid": "9ef99996-54a7-4cd1-99bb-840e3acf99c2", "comment": "Malware payload", "value": "64dc12354752becd35b281bebe6e1710", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552286, "uuid": "fcc33d12-6128-48ae-bd3e-d7bdda550bf1", "comment": "Malware payload", "value": "4f97c2202f87a03a5f4fc656355d43e3a7dfe752ba73ede19e11c8d967b2a96b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552286, "uuid": "d306783b-863c-434b-9723-a7d9bd88fd8e", "value": "T1B2E2941E8739CF48F57C8A20950B0784349CD45601E2BF67964C7FDAAF5A5B32A7AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552286, "uuid": "ef03fce5-f00a-4dec-9369-0ea0e0ff8f52", "value": "192:acDU7+jmKsTp1WDIlzkPwzCXIFPc7I5g2FhQnz2h3wTCG/YcZSNk9SEeCQDpyxhy:aZMUlsN4F+ULua1+ob2Jz77xFL3g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772552286, "uuid": "379c71c7-2f69-4425-b714-68f7fbd8ad5b", "value": 33475, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552286, "uuid": "571f533e-eb17-4339-8682-e8830ba461b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "221ce05e-1717-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772552354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552354, "uuid": "576e54a3-db08-4f24-ada1-e04b41d323ab", "comment": "Malware payload", "value": "ac87760111b44d02c0cc59788c1617d3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552354, "uuid": "69cc459b-0797-460d-a707-22d34cee615a", "comment": "Malware payload", "value": "f0bae772ba93b899a6b6dce7ee1c449a4f78ad282692dac17b05aab15248c9f1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552354, "uuid": "54726561-5744-4070-8777-e5a5ac9bcd6d", "value": "T1098423737B6B39EE1A8C9B18D8091B876E6CD41BC0505AE3EB164DCD59FC7C44C26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552354, "uuid": "7823517c-025b-42a5-ae61-f232adad8d43", "value": "6144:uceY0tfloCSGUW9jHyB+SO8z3RlsJ9/6aCe1ePPp/K387MuyQtgbG:FeYCww9jSB+GBlsJ9iaO3D7MuymIG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772552354, "uuid": "3af09692-68c2-4d62-bc05-9c885625d46f", "value": 403664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552354, "uuid": "ebfeee6a-18b1-4439-97fe-a756b3700a66", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44062eff-1717-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772552411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552411, "uuid": "c7ce1766-f62d-4d69-8bac-60000df15f78", "comment": "Malware payload", "value": "2f83ab33777e15e956883e2dab5e4c31", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552411, "uuid": "942f3562-b3d3-4187-b66b-d3ef66962bfa", "comment": "Malware payload", "value": "90499b4ea50433946ab1b182145c7f86237409e51677131ced3935301abed43a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552411, "uuid": "5fafd056-1529-475f-a9aa-401a672a2148", "value": "T179D104202CEB20DE323B5BA057C8F5FB0A96F5F5292EB1F420419A4947B49D4CCB2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552411, "uuid": "744d2099-cf83-4a99-8c1b-fa4eb7cda202", "value": "192:SZRbhzI/bhs9vTcOtcgWM/Kpe735ZrJqB8araqcQRcZe:+8tsFTcOtcgWMCQ735zqWaraqcQR1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772552411, "uuid": "fcf31dd1-11b0-44e4-bdff-457403ff4c43", "value": 6272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552411, "uuid": "646bb620-1445-46ca-8e3b-f9627b46c0d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4afd9b73-1717-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772552423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552423, "uuid": "be11504b-4412-42d8-8c4b-20bad2d91c98", "comment": "Malware payload", "value": "82de35e133dd4936f3a8b2a69b30c9a4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552423, "uuid": "ddffe908-99e6-4c24-b672-fc190e40e589", "comment": "Malware payload", "value": "54ba437ef06386043eaefe9fc5b45f8eb774f4d53d9cd646bb9b37bba0cc9dc2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552423, "uuid": "1f34dd2e-0d99-4fc1-bd04-569365f3a2a6", "value": "T1983733FE2E49D2ADA8BCD0A0C9C0188DC45D99CDDCB2B4324037DB875CE78DAD2B66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552423, "uuid": "4f830f56-b567-40f1-8e1f-119c23bd0ae1", "value": "393216:nGP52++muB++P1EZqFe254CUvI6Po7XaxQ2Fl4FtclIHFJhcTTgYBrFjEO51zUPl:w53poYqFeEUA6PjQNQ+Ph6cYBp/yqIJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772552423, "uuid": "bd9154ac-e55f-44b5-b1bd-19113bc3305b", "value": 22667359, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772552423, "uuid": "8725a568-0863-4f8d-bbbb-79dd00b1a815", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e81a1bf-171b-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772554093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554093, "uuid": "7ac6edca-1387-44dd-8203-8e3acc95631d", "comment": "Malware payload", "value": "1c8447bb50959591b02bc2cfbb60fedf", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554093, "uuid": "8c842571-330e-48b6-b527-e16a9605a1a7", "comment": "Malware payload", "value": "3ea51354e8400a708ab3c6bbf2e80d73c81fc52a310306abe321ae6398093f1c", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554093, "uuid": "d0a408a4-5a73-4fd7-8e7e-49c4c88818b1", "value": "T18607E69D290F9CE687EE6B8188B42F2C32757B217C13543BA2BC76978F113B45D42B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554093, "uuid": "3eb2a35a-f096-4a8e-90a5-5019f13ca711", "value": "49152:8UixbItdTrJoFVPMvXGIa6tPoat0tsgJReV1Y5PwJzNjXIV5PklblQlq63k8d5kr:7iBI/JoFdMPGe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772554093, "uuid": "10f1dfc5-3226-4864-913f-7b61df35aaba", "value": 17039525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554093, "uuid": "d018de61-8225-457f-afde-0dc797113d27", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3338f03d-171b-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772554101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554101, "uuid": "ec65c417-445e-46cc-ad72-0321b8073dda", "comment": "Malware payload", "value": "1f4197a60621843f776cec10aa1087c1", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554101, "uuid": "9fda6d6a-b972-4391-8b87-ccb3253f0237", "comment": "Malware payload", "value": "9474186e1d5d007a0e69afde4a1e1c3ab0e5bb3aeed469fb8963724a8ffaddbe", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554101, "uuid": "f60337df-2eb5-482e-97f4-9d0e19234958", "value": "T15DA537E288B0FF13B7761D1863745E591018163B0FDB0209B8BEDBC67687DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554101, "uuid": "0ccdad68-1ca4-40b2-8d81-74bc2ed814a8", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTxz:m0eF4xaDjDONijDG8ZxFTN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772554101, "uuid": "19f04ec2-e1a5-4984-a2ad-63f3af934461", "value": 2176076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554101, "uuid": "4a24913b-7651-4bc0-b061-400f698a3cd5", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b6866b7-171b-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772554276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554276, "uuid": "31030f9e-a7ba-41cc-a676-4334b789b6d5", "comment": "Malware payload", "value": "64f9bb9fed39e9869510f0ace9143e86", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554276, "uuid": "f8c5c138-50e0-4b9f-8eed-b5bc1dda0284", "comment": "Malware payload", "value": "ec104a0d6d8403f7f9cf9812d2537605c5cdb777424fe5cf962521981b5b1b27", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554276, "uuid": "16c95f8e-f1ba-480c-9173-49d0be71cdf5", "value": "T155D56BA688B1FF13B7AA8E4873341E5D101426370FCB150AB4BED7C67683A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554276, "uuid": "26e68a1e-96d1-4533-bf60-85fc033ac881", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTnWm3o17gAVSY28Q:m0eF4xaDjDONijDG8ZxFTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772554276, "uuid": "20f32a27-2778-4cd8-99d1-500c381859c0", "value": 2968562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554276, "uuid": "90c865a0-3350-4f9e-be51-845c80cac421", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57e0b57c-1726-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772558887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772558887, "uuid": "22533c8a-b049-4e58-900b-41a1c657cb5d", "comment": "Malware payload", "value": "38f89789c3570c22e3a03a9ee93e4fc4", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772558887, "uuid": "680119be-d76f-459a-ad35-fa6c55de9963", "comment": "Malware payload", "value": "1f48bee857093edc5bf4cead21b7d41f3f8833e83642cd2cac8bbec1295ef615", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772558887, "uuid": "6ddecdd1-78d7-4016-a3fd-328e4bcdc529", "value": "T19B84E0B72292813BDF6A3EBB6C3BE45E0E59540F113A50DD4D911408DBC86EF18B98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772558887, "uuid": "3e533b3a-3d9c-4218-b85b-2d9c1c7527c8", "value": "6144:wB73GK9SvVvdK+TdA7LD9MhSwx4/IJrmhFzXyo2kA39KdAOg3aK1Hn2ZrQi6YPP:M73SvR9bswxJrQXyoZWKTMj6Qo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772558887, "uuid": "16152457-fdd3-4114-8d0f-3a161de61765", "value": 400752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772558887, "uuid": "e8b7556a-7b1b-4d4e-bd2c-3cf424cd3d22", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5880409b-1726-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772558888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772558888, "uuid": "63f5cdf4-4e34-4b74-9316-a29b1aab66d8", "comment": "Malware payload", "value": "ec191017c63ed7acc833a646061bcf99", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772558888, "uuid": "16d41d94-3ef7-4844-bedb-f9cbedbb9bcf", "comment": "Malware payload", "value": "ba0f0aadc7bca814cdd7d7a9af3c7e1ce719518b5593035d77dbf4c5c2f694b2", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772558888, "uuid": "d605ca4a-61d2-484c-b37a-95e971752d2e", "value": "T1BEB4230742BFD436933583DE87D1DD49DE9082913AA8217B58EB2E6503D8FF9F2A11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772558888, "uuid": "dc709737-c067-4ba9-bc4b-630b943c01b9", "value": "12288:K2sVefzEnA/QGSt9mAcDsimY7zczDDgZR6DiopfhCbvhCFq:HsVew5ivsEZwmo5huvAq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772558888, "uuid": "929f4c37-97cd-4ae6-b5f5-e62fce751d4b", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772558888, "uuid": "d9fd34e6-efc4-4596-9fd9-118b3cea75f6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaef5dd8-172f-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772562892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772562892, "uuid": "2c870f66-9707-40bb-8a0d-be4889992e0f", "comment": "Malware payload", "value": "7965ed2a2f2e28c54b582c224f5cee19", "object_relation": "md5", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772562892, "uuid": "1c07a2f6-709a-49b5-aa85-3c3dc42743aa", "comment": "Malware payload", "value": "5583e2a4d20099931da85dee9e423858d0f8beb0453b1cbcb4b3d206f7a07591", "object_relation": "sha256", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772562892, "uuid": "4c77a0a7-7f05-4882-bdfb-0c06c6197119", "value": "T1B011CC01DC0269E75E53B6E8CA130A18DCB9FD3B4066A84CB310CD492E359FCB120B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772562892, "uuid": "7b958ae2-6929-47d8-b49d-1c961497adae", "value": "24:KXnAKqahwAq3wc0K5NU9RGUimUwn/zii9nJswC9KVk6Uwn/zii9nJ7wC9vZ44:NBr50YNIGfmdJJC9KVk6dJkC9hT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772562892, "uuid": "aacb1da2-7711-4983-a937-76332e326fda", "value": 1102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772562892, "uuid": "5ce31a86-ca9e-4a3c-a42f-52437c7fa6d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30813583-173a-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772567411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772567411, "uuid": "0317ccfa-4f37-418f-a6ca-bf1c73fabd41", "comment": "Malware payload", "value": "104bb2481a95e3210a5bb3963c04b455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772567411, "uuid": "87f6581d-1291-4f17-8472-57d92ff41d11", "comment": "Malware payload", "value": "c76197716275cc0f0e6db94b4540cbd72ce1469a92a8e387512d10f5d12a71f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772567411, "uuid": "71bb2e09-66d0-4569-81b2-886bbcf28816", "value": "T17AA68C02FDCB50FAEA031A3005ABA27F23315C058F65EBD7EB407B29F9BB59519361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772567411, "uuid": "9ccad3e6-5678-4609-aa9d-31ea20f77dfa", "value": "98304:66spIP+fncJrBIzpHdRoSMI3skz1gEYED0a7UeTlDjmyHunywM1QQE:QJfQyzpHdRGIL1ZWpelxH+ywSE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772567411, "uuid": "418255e1-0d46-4c80-af35-1e51c8495f06", "value": 10269009, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772567411, "uuid": "67ad5cc7-9ee4-4cb5-ac2f-7654695d31a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85f439c8-173c-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772568413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568413, "uuid": "89028547-d7b5-434f-932a-c6bf537dc9d7", "comment": "Malware payload", "value": "a77ebb5ec54a005127a1dd97e25dc514", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568413, "uuid": "73141374-41d3-4179-9021-abd33473ab79", "comment": "Malware payload", "value": "078c22f167a9c4c734de6988c00338d1569402cf71d5c85809d768e5f358e8fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568413, "uuid": "1bc8a307-d59b-4aed-b661-201b71944147", "value": "T10BF65BC3E8E21ED4C4EE8271D16A425BFA627C091B3823DB1690F7241F37BD4AA767", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568413, "uuid": "8b319d17-9f9a-4d23-bc4c-6e194210e3e5", "value": "196608:VEcrBNHAHBE+R4JCVj3a59WKXxlG6EfweNOAKQzW:VEcrB9EiWKnveQ11", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772568413, "uuid": "ee83eadc-33a2-414e-87f7-56dc8872c7ec", "value": 15384724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568413, "uuid": "e0b72759-2663-46cf-a323-ee4e4ad5363e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772496080, "uuid": "1c1ecd7c-1694-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.38.51.65:39022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772496431, "uuid": "ecfd2d4d-1694-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.34:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772497097, "uuid": "7a6316d6-1696-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.193.220:37185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772497687, "uuid": "d9a77b0d-1697-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:34400/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772497701, "uuid": "e24e3f04-1697-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.85.74:46000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772498346, "uuid": "628b23ae-1699-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6498612463/joycgCT.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772498526, "uuid": "ce1465ef-1699-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:33042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772498588, "uuid": "f2ad443d-1699-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:31855/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772498597, "uuid": "f8473898-1699-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.82:37629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772499138, "uuid": "3ada4038-169b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.82:37629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772499379, "uuid": "ca875737-169b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.85.74:46000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772499854, "uuid": "e548e16f-169c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.99:49029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772499854, "uuid": "e56761fc-169c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.193.129:54257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772500036, "uuid": "51a891cb-169d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.201:54410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772500874, "uuid": "4522f76e-169f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:44035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772500874, "uuid": "452d8d83-169f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.193.129:54257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772500940, "uuid": "6c93bc62-169f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.181.117:59858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772501299, "uuid": "429308db-16a0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.181.117:59858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772501352, "uuid": "622c9588-16a0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.99:49029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772501660, "uuid": "19cf924c-16a1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.74.247:35547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772501840, "uuid": "84e1ec51-16a1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.122:50281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772502383, "uuid": "c8ff2441-16a2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.150.242:34688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772502675, "uuid": "76c3c6bf-16a3-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.252.155/1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772503341, "uuid": "03f13263-16a5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.224.252:60286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772503460, "uuid": "4afc3fd0-16a5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.8:43346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772503517, "uuid": "6cb0cb82-16a5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.74.247:35547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772503700, "uuid": "d9bc5d8c-16a5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:53840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504480, "uuid": "aa8b607c-16a7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.41.170:35434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504590, "uuid": "ec78eef3-16a7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.16.51:8333/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504599, "uuid": "f1bab2d9-16a7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.172.120:47297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504781, "uuid": "5e1f3f72-16a8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.224.252:60286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772504968, "uuid": "cd4ed0af-16a8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.141.101:38612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772505136, "uuid": "31f8bfae-16a9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.105:43366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772505322, "uuid": "a0db8303-16a9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.41.170:35434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772505625, "uuid": "552cf3fd-16aa-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.147.8:33231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772505850, "uuid": "db1a8258-16aa-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:53840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772505980, "uuid": "290645f4-16ab-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.226.130:35311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772506214, "uuid": "b402f745-16ab-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.172.120:47297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772506822, "uuid": "1ead91fe-16ad-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.106.211:53339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772507420, "uuid": "835f7034-16ae-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:42220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772507594, "uuid": "eb15d48c-16ae-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.251.23:46127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772508197, "uuid": "5283687b-16b0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.200.214.66:59438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772508791, "uuid": "b476d29e-16b1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:60327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772508849, "uuid": "d702f449-16b1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.106.211:53339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772509039, "uuid": "480a74ca-16b2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.251.23:46127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772509209, "uuid": "ad6af45e-16b2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:43552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772509276, "uuid": "d568499b-16b2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.171:34670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772509761, "uuid": "f63e4e16-16b3-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.150.135:55785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772509762, "uuid": "f74ec560-16b3-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.150.135:55785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772510597, "uuid": "e8dd7235-16b5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:60327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772510948, "uuid": "ba4243f1-16b6-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.171:34670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772511073, "uuid": "048fac86-16b7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:55576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772511074, "uuid": "0514f85d-16b7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.11.52:46426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772511672, "uuid": "6999413c-16b8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.162:40729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772511732, "uuid": "8d2455e9-16b8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.75:51607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772511800, "uuid": "b5a3edf2-16b8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:54241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772512638, "uuid": "a98ea975-16ba-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.162:40729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772512687, "uuid": "c6c74318-16ba-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.112.107:56914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772512810, "uuid": "0fb6c34f-16bb-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.45:42714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513110, "uuid": "c2e43657-16bb-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.71.127:52039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513350, "uuid": "5168b08b-16bc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.92:43191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513476, "uuid": "9c8e0fd4-16bc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:36180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513719, "uuid": "2d7fac44-16bd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.42.7:59745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772513719, "uuid": "2d83e3f8-16bd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.75:51607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514071, "uuid": "ff293942-16bd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.42.7:59745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514142, "uuid": "29a5cc76-16be-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.112.107:56914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514187, "uuid": "44b3dae3-16be-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.45:42714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514434, "uuid": "d80c0e54-16be-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.212.236:34390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514499, "uuid": "feadd334-16be-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.152.170:42309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514855, "uuid": "d28a8790-16bf-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.59.213:47622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772514980, "uuid": "1cf823a8-16c0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.92:43191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772515040, "uuid": "40bd6be4-16c0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.24.251:36786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772515280, "uuid": "cfd9b101-16c0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:36180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772515574, "uuid": "7f442477-16c1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.251.35:60376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772515755, "uuid": "eb71fd06-16c1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.160:34119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772516292, "uuid": "2b72ef8e-16c3-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.189:43631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772516651, "uuid": "00fae820-16c4-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.177.72:60740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772516779, "uuid": "4d9b56c4-16c4-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.251.35:60376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772516832, "uuid": "6d134e69-16c4-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.59.213:47622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772517678, "uuid": "658a773a-16c6-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.160:34119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772517743, "uuid": "8c240542-16c6-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.189:43631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772517973, "uuid": "15186695-16c7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.177.72:60740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518340, "uuid": "efdf38ee-16c7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:48971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518748, "uuid": "e2f901a7-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/respalditorespaldito/repalditopro/refs/heads/main/CRYP.txt", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518748, "uuid": "e317a952-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://servecdn.my", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518748, "uuid": "e36406a7-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpfiles.org/dl/27053386/vuabet88.tv.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518748, "uuid": "e3641a12-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.205.172.243/downloads/browser_stealer.py", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518749, "uuid": "e3a141a4-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.62.176/firep.img", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "phishing", "colour": "#3de820", "exportable": true, "hide_tag": false }, { "name": "susp-clipboard", "colour": "#edf7e7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e41d423c-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/bash", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e421929d-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/cron", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e421a776-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/ntpd", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e4317eb5-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e4323d86-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/ftp", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e43f7614-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e447cc15-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/sshd", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518750, "uuid": "e48ca4bf-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "e4a27ccd-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "e4cee6d9-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://lpi0ngge6c.ufs.sh/f/6iUgXKGAnNfhv6ErsuPf2QHpJ59uZgXt1RD0dnyqcMGKeYi4", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "e4e221c6-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://lpi0ngge6c.ufs.sh/f/6iUgXKGAnNfhfkzVpT8zhFpeCvZscS8IaxlWKQyYEH0qrJ7G", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "e4fab94e-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://epaste.app/p/MYgb7ihl/raw", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518751, "uuid": "e516cb89-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://servecdn.my/QuickAccessPopup-32-bit.exe", "Tag": [ { "name": "ahk", "colour": "#a8215a", "exportable": true, "hide_tag": false }, { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false }, { "name": "phishing", "colour": "#3de820", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "susp-clipboard", "colour": "#edf7e7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518764, "uuid": "ec8ec313-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://bambooairways.vn/3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518767, "uuid": "ee383927-16c8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.153.189:39128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518807, "uuid": "069373d2-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/pftp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518807, "uuid": "0693ec73-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/apache2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518807, "uuid": "0693fd9f-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/tftp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518807, "uuid": "06941457-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/openssh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518808, "uuid": "06bef0b4-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518808, "uuid": "06bef1db-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/wget", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518809, "uuid": "076d0574-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518809, "uuid": "077e5a5d-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "081527d8-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "0818b931-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "0818c40c-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "0819cd12-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "085fe9c5-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "085feebc-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "085ff437-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518810, "uuid": "085fff3d-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772518811, "uuid": "08668efc-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772519204, "uuid": "f2fcfce3-16c9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.164:59951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772519482, "uuid": "986b7aba-16ca-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.185.166:44355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772519724, "uuid": "28d2bf59-16cb-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.159.215:38117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520081, "uuid": "fd64726c-16cb-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.193.220:37185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520081, "uuid": "fdc07352-16cb-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.213.235.26:50439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520245, "uuid": "5f5519d8-16cc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://goldenangel.wuaze.com/MSI_PRO_with_b64.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520247, "uuid": "60ae720e-16cc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://pngup.com/xV1t/MSI_PRO_with_b64.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520248, "uuid": "613ca7f0-16cc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive.org/download/newmarchrump/newmarchrump.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520262, "uuid": "695a766a-16cc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:34629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520440, "uuid": "d399c14f-16cc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.159.215:38117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520441, "uuid": "d3f9d7c0-16cc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.214.33:56883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520559, "uuid": "1a4abcea-16cd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.148.227:46866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520571, "uuid": "21889d74-16cd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.153.189:39128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520741, "uuid": "86c88d4d-16cd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.164:59951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772520802, "uuid": "ab2a93e5-16cd-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.185.166:44355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521102, "uuid": "5e3dd1ca-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.140.193:45709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "a11c04d8-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/a-r.m-6.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "a12575f0-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/x-8.6-.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521214, "uuid": "a12733e9-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/m-p.s-l.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521221, "uuid": "a55afed4-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/x-3.2-.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521221, "uuid": "a567b173-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/i-5.8-6.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521223, "uuid": "a6430cfd-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521224, "uuid": "a7193dfb-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/p-p.c-.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521269, "uuid": "c1885247-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://explorer.vg/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521282, "uuid": "c9b54394-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/m-i.p-s.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "ca21b986-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/m-6.8-k.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "ca21bef9-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/a-r.m-5.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "ca21d057-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/s-h.4-.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "ca233cbf-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/a-r.m-7.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521283, "uuid": "ca2672ec-16ce-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/a-r.m-4.dick", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521470, "uuid": "39a28258-16cf-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.245.120:33306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521812, "uuid": "054449f4-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://adraaltinoluk.com/arquivo_20260303102246.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521868, "uuid": "27169763-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeigq6iohqop4lt5ynsuok4pflhoirsrtwxljecye4nzzgtl4dshyx4", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521885, "uuid": "30c8b558-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://pngup.com/XRhs/MSI_PRO_with_b64.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772521928, "uuid": "4a60d3df-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafkreie6p54rcmqgnunlyhyxuekt7sskt63wruvz5gsioyxom5g2u7j7yq", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522046, "uuid": "91289eb4-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.248.151.201/14.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522047, "uuid": "912f8656-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.224/12.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522047, "uuid": "9152e14d-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.248.151.201/113/cw.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522049, "uuid": "92c7f051-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://zynova.infinityfree.me/img_184335.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522049, "uuid": "92d68717-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.224/21/ce.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522060, "uuid": "997a2ca9-16d0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.140.193:45709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772522900, "uuid": "8dea0936-16d2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.245.120:33306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772523929, "uuid": "f2fddc99-16d4-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.90.191.42:54667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524882, "uuid": "2b427264-16d7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.90.191.42:54667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772524953, "uuid": "55629741-16d7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.246.96:41067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525009, "uuid": "76cf62e2-16d7-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.23.51:40339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772525721, "uuid": "1f913928-16d9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.23.51:40339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772526382, "uuid": "a96d899e-16da-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.68.197:44948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527220, "uuid": "9cf3f350-16dc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.229:37095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527279, "uuid": "c004dc17-16dc-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.41.123:33370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772527942, "uuid": "4aeffb9c-16de-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.100:34504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528297, "uuid": "1e7bd55c-16df-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.41.123:33370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528423, "uuid": "69f70c68-16df-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.80.125:36278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528488, "uuid": "90e0499a-16df-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.66.231:50416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772528649, "uuid": "f0c9897a-16df-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.68.197:44948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529023, "uuid": "cfa0a789-16e0-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.105:43366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529203, "uuid": "3ae12b7c-16e1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.229:37095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529204, "uuid": "3b5e658e-16e1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.221.224:45729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529324, "uuid": "82aa1207-16e1-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.113:48300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529633, "uuid": "3ae342e4-16e2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.152.88:57615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529823, "uuid": "ac534c07-16e2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.152.88:57615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772529823, "uuid": "ac818980-16e2-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.68.84:33002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530154, "uuid": "71af81b0-16e3-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.113:48300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530400, "uuid": "0447aee3-16e4-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.167:49770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530816, "uuid": "fc4a1993-16e4-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/CptX5z6.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "1b9a3b7f-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/Stnon.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "1ba8d96e-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/reverse.elf", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "1bb967e1-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/hfsServ.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "1c0528dc-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/TeamServ.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "1c0d8e17-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/TCity.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530869, "uuid": "1c13f34c-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/hfsSer.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530870, "uuid": "1c4be693-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/meshagent32-Access.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530870, "uuid": "1c57b98d-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/agent.exe", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530926, "uuid": "3df3b4bd-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.11.107.134:8000/4040.bin", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772530937, "uuid": "44311df7-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.167:49770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772531168, "uuid": "cdf7d782-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.68.84:33002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772531233, "uuid": "f4c300f7-16e5-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:41305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772531599, "uuid": "ceabaa08-16e6-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.187:52830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532159, "uuid": "1cb534c9-16e8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:60097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532258, "uuid": "579d4530-16e8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.63.155:40096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532489, "uuid": "e180c622-16e8-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.178:34259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532626, "uuid": "33542097-16e9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.176.180:52609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532916, "uuid": "dfac2ff7-16e9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:41305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532968, "uuid": "fecccab2-16e9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-ship-shop.site/script%20gokil.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532969, "uuid": "ff884b2c-16e9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.107.19:41741/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532969, "uuid": "ff9f54d0-16e9-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.107.19:41741/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "007e7bc7-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.50.136:43313/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "008ba2fd-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://store3.gofile.io/download/direct/c06d675b-e888-418c-81fc-da767978a821/Zoom.setup.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532971, "uuid": "00bf333f-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://frehf.oss-cn-hongkong.aliyuncs.com/Pemberitahuan%20Penyesuaian%20Gaji.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532972, "uuid": "0146ac69-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://store3.gofile.io/download/direct/fa73b75c-8406-4049-8783-07a8d17d27cc/Mr3!26.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532972, "uuid": "0176b17f-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.6.186:49554/Mozi.a", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532976, "uuid": "03c50249-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://agreement4565.s3.us-east-2.amazonaws.com/agreement03022026.msi", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532978, "uuid": "04c77fa8-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.ossc.shop/RepayApp_v2.2.6.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532979, "uuid": "055fd36d-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.54:58396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772532980, "uuid": "05eaafc7-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.228:36801/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772533044, "uuid": "2c62a02d-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.187:52830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772533268, "uuid": "b1f3b164-16ea-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://adobe-reader-pdf-visualizer-nota-eletronica.nfe-pdf.shop/dv/zjp.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772533514, "uuid": "448d8322-16eb-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.63.155:40096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772534170, "uuid": "cb8a1a6f-16ec-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:49992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772534536, "uuid": "a594c614-16ed-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.15.90:52276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772535551, "uuid": "0276ebd2-16f0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.9.241/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772536036, "uuid": "2368f712-16f1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:49992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772536037, "uuid": "245debc5-16f1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.15.90:52276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772536206, "uuid": "88e693fc-16f1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.66.66/1.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772536875, "uuid": "17ec1ae1-16f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.253.62:55549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772537059, "uuid": "852e75b2-16f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.162:60763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772537239, "uuid": "f0bc4e73-16f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:60097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772538315, "uuid": "71eaf648-16f6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.178.186:48637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772538428, "uuid": "b55a8e6b-16f6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:15357/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772539098, "uuid": "44b43e53-16f8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.238.241:53751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772539456, "uuid": "19f57ed4-16f9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.246.134:56402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772539929, "uuid": "33cfc7a3-16fa-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:51897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772540179, "uuid": "c8c2b0c1-16fa-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/str/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772540418, "uuid": "57bf2315-16fb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:35436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541192, "uuid": "24ff7f4e-16fd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.252.164:58016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541369, "uuid": "8e627083-16fd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5908119101/gkmdY2O.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541555, "uuid": "fd0f978a-16fd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:51897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541746, "uuid": "6f435242-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.7:48960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541799, "uuid": "8ec2f1d0-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.147.201:51333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541799, "uuid": "8ec37e53-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.136:55885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541846, "uuid": "aa6cfe97-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:35875/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541846, "uuid": "aa75fe0b-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.194.158.117:14603/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541846, "uuid": "aaa19f33-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.239.36:1138/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541846, "uuid": "aab00c6b-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.99.103:46151/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541846, "uuid": "aab03dd0-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.99.103:46151/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541847, "uuid": "ab4954bb-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.107:54760/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac6fb149-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.29:60515/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac6fb482-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_bash.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac6fe9b6-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.29:60515/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac6ffce4-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.90.149.231:34810/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac7319b3-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.225.248.26:18373/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac731d9b-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.217:38337/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541849, "uuid": "ac864f9e-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.34.190.36:1178/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541850, "uuid": "acdea8ab-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.206.153.187:33487/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541850, "uuid": "ad0c2ab8-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.77.188.136:7618/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541851, "uuid": "ad58266a-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebulldogs.com/uploads/YTULHPME1P/Algerian%20Ukrainian%20proposals%20for%20cooperation.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541851, "uuid": "ad6d2eea-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.217:38337/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541851, "uuid": "ad85c681-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kokorostore.it/media/tXmCLyGO.exe", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541853, "uuid": "aef69ab7-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebulldogs.com/uploads/82WX5GP8CI/f.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541854, "uuid": "af6f0591-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.us.vdns.us/Windows/download.php", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541861, "uuid": "b3436404-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.150/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541861, "uuid": "b353f3db-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:47253/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541861, "uuid": "b356e298-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:47253/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541861, "uuid": "b3599d0e-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.206.225.136/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541861, "uuid": "b35e2996-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.123.125:42546/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541861, "uuid": "b390ec1b-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.85.84:57637/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541878, "uuid": "bd884404-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.108.75:57830/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541879, "uuid": "be1746e1-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.108.75:57830/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541885, "uuid": "c21be49c-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.73:49900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772541971, "uuid": "f541c32f-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:35436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542402, "uuid": "f6242822-16ff-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.252.164:58016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542458, "uuid": "174472b0-1700-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:49406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542530, "uuid": "421410ce-1700-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:32862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542579, "uuid": "5f8ccc8f-1700-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:49406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542636, "uuid": "8133b42e-1700-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.238.241:53751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542658, "uuid": "8eb00284-1700-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.15.165:59744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772542822, "uuid": "f02a1a0f-1700-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.73:49900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772543296, "uuid": "0a9c6566-1702-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.7:48960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772543591, "uuid": "badb1ae4-1702-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:48971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772543646, "uuid": "dbc78ecf-1702-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-91bd854ab98f4e1ea30cb31fe7b9e1a7.r2.dev/ups.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772543838, "uuid": "4e388941-1703-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.119:34156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544021, "uuid": "bb06289c-1703-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.198.242.134:35805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544072, "uuid": "d9298284-1703-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.182.251:46256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544200, "uuid": "25f7670b-1704-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:32862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544200, "uuid": "25fcc39c-1704-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.182.251:46256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544203, "uuid": "27445a5c-1704-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.15.165:59744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544380, "uuid": "90f38b8b-1704-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.41.208:54738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544429, "uuid": "ae484444-1704-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7362035837/tNRasRy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544502, "uuid": "d9d94b58-1704-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.94:48838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772544984, "uuid": "f8d64209-1705-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.41.208:54738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545114, "uuid": "46791ab4-1706-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.111.169:53155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545163, "uuid": "63775425-1706-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.247.24:32874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545227, "uuid": "89901bba-1706-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:58060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545582, "uuid": "5d2f5386-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545582, "uuid": "5d303e13-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545582, "uuid": "5d335621-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545582, "uuid": "5d3ea15d-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545582, "uuid": "5d3fc575-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "603be49a-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "60461a2e-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "60495b4c-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "60496c7d-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6051d700-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6051edfa-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "60571cc0-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "605b72ee-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "60605b7b-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.17/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "606d1289-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "60757a75-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6080c0c4-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6081d09f-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6081d49c-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "608ec57a-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545587, "uuid": "6098dd5b-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545632, "uuid": "7b645312-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545643, "uuid": "81c8156b-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545643, "uuid": "81d27ede-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545644, "uuid": "824f4682-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.198.242.134:35805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545644, "uuid": "826becd4-1707-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.253:49422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772545887, "uuid": "1333dbef-1708-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.122.223:35081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772546002, "uuid": "57e6ef39-1708-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.19:43901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772546426, "uuid": "549cd0da-1709-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.95.179.55:51468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772546718, "uuid": "02a05cbd-170a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.111.169:53155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772546887, "uuid": "67477c57-170a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/PKenO2z.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547262, "uuid": "46fb290a-170b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.247.24:32874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547441, "uuid": "b15860db-170b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.122.223:35081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547487, "uuid": "cd06b037-170b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6629342726/FqAHdwm.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547741, "uuid": "64085517-170c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.253:49422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547792, "uuid": "82f8da90-170c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://newapps.site/NISSAN3.exe", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772547980, "uuid": "f309ca05-170c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.46.156:50993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548097, "uuid": "38a02df2-170d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.133.35:52409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548746, "uuid": "bb75aa96-170e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.208.90/system.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548806, "uuid": "df5cb7e1-170e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.66.66/NEMO777.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548866, "uuid": "02bd93ce-170f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/vcHTNlEJEqVmFxkDqyaPVbx162.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548868, "uuid": "03dc1dd3-170f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/uitEfXyiX32.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548868, "uuid": "03f1a60d-170f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/tFFXzgLVYUeXIGLTLiedCKK171.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548927, "uuid": "2706d6d3-170f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/NrwdgeeSVyLHEFlLR90.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772548927, "uuid": "273ffe65-170f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/uGxFEbEtZYzL59.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549119, "uuid": "99c0b371-170f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.165.28.120:51160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549411, "uuid": "47f31db2-1710-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:39554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549473, "uuid": "6ce7b70c-1710-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/btG8ffb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549528, "uuid": "8d40f327-1710-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://app-dn.b-cdn.net/CryptoVista_Installer.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549536, "uuid": "925752e2-1710-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.46.156:50993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772549650, "uuid": "d619fd65-1710-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://solarbase.suncrest.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550256, "uuid": "3f186605-1712-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:39554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550312, "uuid": "60f7d37b-1712-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.last-version.com/claude", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550318, "uuid": "647d26c2-1712-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.110:57159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550319, "uuid": "65044e95-1712-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.73.134:50229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772550912, "uuid": "c685c0da-1713-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Administrator-hub/Data.Uploads/refs/heads/main/doiidieraupload.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551029, "uuid": "0c061080-1714-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunflow.suncrest.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551030, "uuid": "0cc69c03-1714-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Administrator-hub/Files/refs/heads/main/Attachedupload.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551032, "uuid": "0dfc65fc-1714-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Administrator-hub/Data.Profiles/refs/heads/main/doiidieraupload.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551033, "uuid": "0e498bd7-1714-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Administrator-hub/Orders/refs/heads/main/Certificatesupload.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551226, "uuid": "817e5eaf-1714-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/ouh3nf.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551515, "uuid": "2deb7cd3-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.237/100/kmh.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551580, "uuid": "5461e99b-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://okullu.com/FmmjAIk.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551580, "uuid": "546a51bf-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://okullu.com/Scpmkff.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551589, "uuid": "59aa577a-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.233:60786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551629, "uuid": "71d81677-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeihamvbzrm2tsifa4s7xruhfnsgnkzgtk2jqwj6cwgmdxj4wqe5lm4.ipfs.dweb.link/?filename=optimized_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551630, "uuid": "7258400d-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeiedkdwsp77zcvi6477lovtfde7rwsjdz7654kdnrgmciqg5mfhwh4.ipfs.dweb.link/?filename=GeneratedPayload.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551818, "uuid": "e269518b-1715-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/kpjremp.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "027f89cd-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/gokenmm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "0283f99d-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/meipSdo.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "0284c8f0-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/eIjjSam.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "0284e75b-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/mkgkdee.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "02878505-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/dcckcrd.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551872, "uuid": "028f48ff-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/nSFkdAa.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551873, "uuid": "02fe7bf4-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/pAaIori.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551928, "uuid": "24324bcd-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bildify.co/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772551930, "uuid": "2523146f-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.38.4.189/base/ImmISpm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552286, "uuid": "f9a0362a-1716-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/sleahygtr/sleaked.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552298, "uuid": "00bae034-1717-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.214.33:56883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552354, "uuid": "22271794-1717-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/kelechi/rnSepIe.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552411, "uuid": "441388ca-1717-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebulldogs.com/uploads/OKW5RN48ZJ/f.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552423, "uuid": "4b115900-1717-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebulldogs.com/uploads/OKW5RN48ZJ/a.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552658, "uuid": "d6efbb1b-1717-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.165.28.120:51160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552713, "uuid": "f81f9185-1717-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/6uUSjO5.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552767, "uuid": "17f32bac-1718-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:59185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772552945, "uuid": "826bf489-1718-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pngup.com/j8LG/MSI_PRO_with_b64.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772553007, "uuid": "a7446522-1718-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oakpath.oaktrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772553008, "uuid": "a7775fbb-1718-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shiftspace.creativemindsuaeu.com/wp-content/plugins/xvbmiag/ShShcpk.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772553067, "uuid": "cac1aa41-1718-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bittere63e.gcjc7ulfg8zc.workers.dev/PrbUa-02-03/gasped/opera/outdoor/3/2/2026/ram188618.yuv", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772553312, "uuid": "5ce9da3e-1719-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.111:60683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772553787, "uuid": "781bd98b-171a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trail-v2.oaktrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772553861, "uuid": "a3d9c774-171a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.109.59:36552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554031, "uuid": "09414ed9-171b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.137:51187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554088, "uuid": "2bafe3ac-171b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.143:58031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554093, "uuid": "2e8c004f-171b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://ia600705.us.archive.org/23/items/optimized_msi_20260303/optimized_MSI.png", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554101, "uuid": "3344b6ba-171b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://msidownloads.duckdns.org/Nueva%20carpeta/vm.png", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554276, "uuid": "9b8303e3-171b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://msidownloads.duckdns.org/Nueva%20carpeta/Copi.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554328, "uuid": "baafe0fe-171b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oak05.oaktrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554462, "uuid": "0a2c51ab-171c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.157.249:36984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772554626, "uuid": "6beef2a0-171c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://forest-run.oaktrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555001, "uuid": "4bcff691-171d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:41331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555227, "uuid": "d25741d2-171d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://redbase.redhaven.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555357, "uuid": "1fa20753-171e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.137:51187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555419, "uuid": "44f46948-171e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.129.242:54352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555594, "uuid": "ad568684-171e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5431781362/qnRR28H.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555657, "uuid": "d27642d6-171e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.143:58031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772555828, "uuid": "38642874-171f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-x.redhaven.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772556011, "uuid": "a582bf1e-171f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/gK1gA7B.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772556014, "uuid": "a72abfe1-171f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.87.10:44252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772556310, "uuid": "580b9c4d-1720-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://red09.redhaven.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772556372, "uuid": "7d05ae11-1720-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:41331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772556733, "uuid": "53d73cd6-1721-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.157.249:36984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772556855, "uuid": "9cb9f0da-1721-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.87.10:44252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557159, "uuid": "51cd6f6b-1722-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.140:34746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557516, "uuid": "26d2642f-1723-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.183.163/1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557637, "uuid": "6e92f888-1723-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.11.52:46426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557637, "uuid": "6e9d1e20-1723-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.154.62:54754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557694, "uuid": "908d08db-1723-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.95.116:41532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557811, "uuid": "d63a99b5-1723-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.243.66:60100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772557869, "uuid": "f8d2e933-1723-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7665719804/6SPIsCm.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772558887, "uuid": "57ee6688-1726-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/xg3mu7l4y05oiip/Genindkaldelsens157.pfb/file", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772558888, "uuid": "588f8e5c-1726-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/yzxo6uww1y5yz65/GLxUBVpoQRtMHg190.bin/file", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772559074, "uuid": "c7275017-1726-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.95.116:41532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772559750, "uuid": "5a7b40fc-1728-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.113.12:43446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772560397, "uuid": "dc01cc3f-1729-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.113.12:43446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772560751, "uuid": "af15ce60-172a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.154.62:54754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772560809, "uuid": "d1741fe9-172a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.120.234:44454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772560868, "uuid": "f4a6535d-172a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-core.redhaven.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772561647, "uuid": "c4dafdee-172c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-unit.windcrest.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772561829, "uuid": "317306fc-172d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5431781362/DJrIZMA.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772562188, "uuid": "07361581-172e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crest03.windcrest.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772562737, "uuid": "4ecef529-172f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.80.125:36278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772562978, "uuid": "de55bac4-172f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.110.141:38560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772562978, "uuid": "de5e01bc-172f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.53.189:44858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772563400, "uuid": "d9f11e7a-1730-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.143.103:52054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772563568, "uuid": "3e20876f-1731-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://air-path.windcrest.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772564900, "uuid": "57ee6a66-1734-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.143.103:52054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772565019, "uuid": "9f10c4e4-1734-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.31.181:32877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772565020, "uuid": "9f747daa-1734-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.254:49160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772565211, "uuid": "117f8c0e-1735-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.14:49145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772565667, "uuid": "20e4b832-1736-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-v1.windcrest.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772565680, "uuid": "28a85191-1736-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.136:55885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772565799, "uuid": "6fb62d56-1736-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.192.7:37723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772566207, "uuid": "62ecf422-1737-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold04.goldtrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772566223, "uuid": "6c24630a-1737-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.14:49145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772566449, "uuid": "f36de335-1737-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.73.28:58525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772566692, "uuid": "8408c898-1738-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.237.148:37727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772567709, "uuid": "e1f492ef-173a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trail-net.goldtrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772567794, "uuid": "1499118b-173b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.103.67.3:40474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568023, "uuid": "9d095114-173b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.73.28:58525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568023, "uuid": "9d737a99-173b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.43.231:55171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568081, "uuid": "bfcda6c7-173b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.111.170:38077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568263, "uuid": "2c225629-173c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.192.86:38237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568309, "uuid": "47c6aba1-173c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-hub.goldtrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772568502, "uuid": "bb03d92c-173c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.130.124:38591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772569626, "uuid": "58b2a3b1-173f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trail-x.goldtrail.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772569870, "uuid": "ea42344d-173f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.35:37756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772570064, "uuid": "5dcb9b9a-1740-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.43.231:55171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772570122, "uuid": "80b077db-1740-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.130.124:38591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772570587, "uuid": "9584ef10-1741-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://save-node.savingssit.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772570663, "uuid": "c2edb0b7-1741-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.41.229:49056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772571023, "uuid": "999b0587-1742-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.35:37756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772571980, "uuid": "d3c29dd4-1744-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.41.229:49056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772572224, "uuid": "65139c32-1745-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:55818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772572461, "uuid": "f2b669a5-1745-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.138.19:37090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772572759, "uuid": "a4730e6d-1746-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.159:59820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772572881, "uuid": "ecec4e58-1746-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.254:49160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772572882, "uuid": "ed9f27c7-1746-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.119.163:37863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772573595, "uuid": "96941db0-1748-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.159:59820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772573951, "uuid": "6af0ec50-1749-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:55818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772574496, "uuid": "af60edab-174a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.200.240:33346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772574666, "uuid": "14db16a0-174b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/o.xml", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772574666, "uuid": "14db19c7-174b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/c.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772576178, "uuid": "99f4fad9-174e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.127:57919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772576893, "uuid": "4470acdb-1750-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.73.134:50229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772577246, "uuid": "16d81e3a-1751-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sit-v1.savingssit.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772577247, "uuid": "175d8a06-1751-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://odx9za7g.suffocturkey.digital/?=check&&actmn=ynqCEeawwCbDtQSr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772577258, "uuid": "1d9a972b-1751-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.234.233:44544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772578448, "uuid": "e3633024-1753-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.139.239:54913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772578637, "uuid": "53aab811-1754-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.246.18:46573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772578815, "uuid": "be0dd225-1754-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.139.239:54913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772578994, "uuid": "286c7c58-1755-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.234.233:44544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772579047, "uuid": "4829402d-1755-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault08.savingssit.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772579645, "uuid": "ac69ad8d-1756-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/boyl7molon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772579658, "uuid": "b47a1718-1756-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.243:42470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772580078, "uuid": "aecc9d08-1757-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:52146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772580079, "uuid": "af7a55e8-1757-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.166.156:48517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772580427, "uuid": "7ef5cc72-1758-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bank-sync.savingssit.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772580970, "uuid": "c217622a-1759-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://insur-net.dachshreinsur.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772581219, "uuid": "5684b794-175a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.131:46206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772581749, "uuid": "92ddd2f4-175b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.90.113:53528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772581809, "uuid": "b6b1d59d-175b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dach-core.dachshreinsur.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772581868, "uuid": "d9bc978d-175b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.90.113:53528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582047, "uuid": "440decb5-175c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shre-v1.dachshreinsur.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582061, "uuid": "4cab4210-175c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.243:42470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582062, "uuid": "4d31224f-175c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.120.113:55583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582181, "uuid": "946dfd59-175c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.152.33:45752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582286, "uuid": "d2cb926e-175c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://insur02.dachshreinsur.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582294, "uuid": "d737761b-175c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.188:43050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772522046, "uuid": "90ac1b93-16d0-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.248.151.201", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772546410, "uuid": "4b0b1811-1709-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.95.179.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772557145, "uuid": "497e5b6a-1722-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.230.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772531225, "uuid": "f03b6b97-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.1.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772537045, "uuid": "7cc3e98b-16f3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.77.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdb0d0bd-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.50.136", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772497685, "uuid": "d885705a-1697-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.85.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772542624, "uuid": "7a920ae1-1700-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.15.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541845, "uuid": "aa3e0ddf-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.108.75", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772565186, "uuid": "020f2f78-1735-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.114.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541845, "uuid": "aa311591-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.185.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772572445, "uuid": "e8dd0f79-1745-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.138.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fda9af3d-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.107.19", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772544006, "uuid": "b231cecd-1703-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.198.242.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772505125, "uuid": "2b73767f-16a9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.149.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529311, "uuid": "7b4b0762-16e1-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.162.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772579645, "uuid": "ac466ce1-1756-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.24.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550307, "uuid": "5da89ff8-1712-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.73.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568065, "uuid": "b61b9170-173b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.111.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568006, "uuid": "92ede734-173b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.43.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772582284, "uuid": "d1c747f6-175c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.198.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772512806, "uuid": "0d3fb2fa-16bb-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.248.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772527266, "uuid": "b841e3e3-16dc-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.41.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528407, "uuid": "60897769-16df-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.80.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772514846, "uuid": "cd5e6d4f-16bf-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.59.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772500925, "uuid": "63e0898a-169f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.181.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772505606, "uuid": "49d862bb-16aa-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.147.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545986, "uuid": "4df5746a-1708-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.90.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772503324, "uuid": "f9f12532-16a4-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.224.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524985, "uuid": "68cf5c46-16d7-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.23.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772539085, "uuid": "3ca16c71-16f8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.238.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772512685, "uuid": "c51b3df3-16ba-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.112.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772499845, "uuid": "e050bb0d-169c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.173.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545865, "uuid": "065ee9df-1708-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.122.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532607, "uuid": "27c0bbb9-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.176.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520545, "uuid": "127395ff-16cd-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.148.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504945, "uuid": "bfa3d546-16a8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.141.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772506809, "uuid": "16d108ce-16ad-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.106.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772559726, "uuid": "4ba33d61-1728-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.113.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549106, "uuid": "91eab41a-170f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.165.28.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772574483, "uuid": "a7db81b5-174a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.200.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772572865, "uuid": "e38e39ba-1746-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.119.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772528467, "uuid": "84022894-16df-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.66.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772514425, "uuid": "d2962f76-16be-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.212.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772499845, "uuid": "e0507a3b-169c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.228.193.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772511064, "uuid": "fede84d9-16b6-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.11.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772543825, "uuid": "460a1db7-1703-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.244.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772553845, "uuid": "9aa6c9f7-171a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.109.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772524925, "uuid": "452dd238-16d7-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.246.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772557685, "uuid": "8bab0c42-1723-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.95.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772497085, "uuid": "72df73ad-1696-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.193.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772539445, "uuid": "134de9be-16f9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.246.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772509266, "uuid": "cf50cbcf-16b2-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.83.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772581206, "uuid": "4ecd33c2-175a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.0.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772516285, "uuid": "272fd65d-16c3-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.64.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530865, "uuid": "19531fce-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.11.107.134", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772536205, "uuid": "886c6a12-16f1-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.241.66.66", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1c6127e-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.205.172.243", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554445, "uuid": "004b5ed9-171c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.157.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504586, "uuid": "ea14cb0e-16a7-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.172.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772519466, "uuid": "8f4f552e-16ca-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.185.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772565005, "uuid": "969baa01-1734-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.31.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521446, "uuid": "2b76ada2-16cf-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.245.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772582045, "uuid": "4316a3a9-175c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.120.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772553308, "uuid": "5a586dd9-1719-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.123.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772580064, "uuid": "a687eb09-1757-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.166.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772509746, "uuid": "ed4c2fef-16b3-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.150.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541186, "uuid": "2124f8c8-16fd-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.252.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdaaaae6-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.208.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772577244, "uuid": "15a521ad-1751-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.234.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772516645, "uuid": "fde961d4-16c3-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.177.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772563385, "uuid": "d0ee55b2-1730-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.143.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772544366, "uuid": "885b6666-1704-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.41.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdaac7d8-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.6.186", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772535544, "uuid": "fe490521-16ef-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.196.9.241", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772548745, "uuid": "ba743704-170e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.208.90", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772557507, "uuid": "215569a3-1723-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.183.163", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502666, "uuid": "7159f0b2-16a3-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.252.155", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772567765, "uuid": "038f67eb-173b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.103.67.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551511, "uuid": "2b99eedb-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.176.237", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772502366, "uuid": "be8cc2a3-16a2-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.150.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772578625, "uuid": "4c8270a9-1754-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.246.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772501825, "uuid": "7c4a0ca2-16a1-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.5.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772544486, "uuid": "d020953a-1704-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.175.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772578444, "uuid": "e0c53750-1753-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.139.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772582167, "uuid": "8bbf7594-175c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.152.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772544065, "uuid": "d55bf43d-1703-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.182.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568245, "uuid": "2179e3a1-173c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.192.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772565786, "uuid": "67daa165-1736-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.192.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772572745, "uuid": "9bcde5bb-1746-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772566445, "uuid": "f09598dc-1737-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.73.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772515567, "uuid": "7b10e7ad-16c1-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.251.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504465, "uuid": "a1f56872-16a7-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.41.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551573, "uuid": "50654ce8-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.177.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545085, "uuid": "3544f79a-1706-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.111.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdac6bda-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.113.228", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541845, "uuid": "aa3fadb1-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.77.188.136", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521084, "uuid": "53799c7d-16ce-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.140.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529817, "uuid": "a8d7a622-16e2-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.68.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541785, "uuid": "860b88e4-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.125.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520426, "uuid": "cb1aa9cd-16cc-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.214.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772570644, "uuid": "b7d411a0-1741-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.41.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541785, "uuid": "860b9e23-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.147.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772557806, "uuid": "d3444336-1723-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.243.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1cbc634-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.153.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772545565, "uuid": "537552a1-1707-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.58.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772508185, "uuid": "4b12afe6-16b0-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.200.214.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772504586, "uuid": "ea14d072-16a7-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.16.51", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772519707, "uuid": "1ec4c259-16cb-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.159.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772513346, "uuid": "4f19d810-16bc-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.5.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772523907, "uuid": "e629c6df-16d4-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.90.191.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772529187, "uuid": "31491600-16e1-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.221.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772526366, "uuid": "9fa3a310-16da-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.68.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568486, "uuid": "b1504fe5-173c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.130.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554025, "uuid": "05aa44a7-171b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532245, "uuid": "4feb9891-16e8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.63.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772530387, "uuid": "fc67efd1-16e3-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.91.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1c3d621-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.133.62.176", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "phishing", "colour": "#3de820", "exportable": true, "hide_tag": false }, { "name": "susp-clipboard", "colour": "#edf7e7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521207, "uuid": "9c8742f4-16ce-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.90.61.79", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1c38f9d-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.71.224.150", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551810, "uuid": "ddbe8937-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.38.4.189", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1c67052-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.142.209.47", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541845, "uuid": "aa066306-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.206.153.187", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772496065, "uuid": "13161ef6-1694-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.38.51.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541845, "uuid": "aa4d8f92-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.34.190.36", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772522046, "uuid": "90ab9efb-16d0-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.44.159.224", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772533267, "uuid": "b0e60a89-16ea-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "adobe-reader-pdf-visualizer-nota-eletronica.nfe-pdf.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521807, "uuid": "023b953e-16d0-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "adraaltinoluk.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdd4396a-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "agreement4565.s3.us-east-2.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772563566, "uuid": "3cd8d809-1731-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "air-path.windcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549526, "uuid": "8c1c821a-1710-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "app-dn.b-cdn.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdfa097d-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.ossc.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551627, "uuid": "7075d791-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeiedkdwsp77zcvi6477lovtfde7rwsjdz7654kdnrgmciqg5mfhwh4.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551627, "uuid": "7060338f-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeihamvbzrm2tsifa4s7xruhfnsgnkzgtk2jqwj6cwgmdxj4wqe5lm4.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e21ff616-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "bambooairways.vn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772580425, "uuid": "7d7fe0dd-1758-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bank-sync.savingssit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551928, "uuid": "23b663ee-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bildify.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772553066, "uuid": "ca3bc48f-1718-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bittere63e.gcjc7ulfg8zc.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772562186, "uuid": "05fad52c-172e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crest03.windcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772581807, "uuid": "b55e4cd5-175b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dach-core.dachshreinsur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772550309, "uuid": "5eea07ca-1712-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.last-version.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1f5d31b-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "epaste.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772521267, "uuid": "c04528d9-16ce-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "explorer.vg" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541846, "uuid": "aa61d25c-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "filebulldogs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554624, "uuid": "6b04b654-171c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "forest-run.oaktrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fded2286-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "frehf.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772568307, "uuid": "468aadb4-173c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-hub.goldtrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772566205, "uuid": "61cf4a22-1737-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold04.goldtrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772520245, "uuid": "5f209b67-16cc-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldenangel.wuaze.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772560866, "uuid": "f3486cc2-172a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-core.redhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772555826, "uuid": "37289ac4-171f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-x.redhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772580967, "uuid": "c090f991-1759-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "insur-net.dachshreinsur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772582284, "uuid": "d1d02294-175c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "insur02.dachshreinsur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532967, "uuid": "fe9539f7-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "kaintlian.com.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541846, "uuid": "aa6575e4-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kokorostore.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1e22d4b-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "lpi0ngge6c.ufs.sh" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772547786, "uuid": "7ef54837-170c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "newapps.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772554326, "uuid": "b94a460b-171b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oak05.oaktrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772553005, "uuid": "a605f8ea-1718-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oakpath.oaktrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772577244, "uuid": "15b9bd0b-1751-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "odx9za7g.suffocturkey.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551573, "uuid": "509106b8-1715-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "okullu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772543644, "uuid": "da615389-1702-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-91bd854ab98f4e1ea30cb31fe7b9e1a7.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772556308, "uuid": "56d44242-1720-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "red09.redhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772555225, "uuid": "d12d35b3-171d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "redbase.redhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772570585, "uuid": "94879f1e-1741-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "save-node.savingssit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772518746, "uuid": "e1e47e27-16c8-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "servecdn.my" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772553005, "uuid": "a60ff0b4-1718-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "shiftspace.creativemindsuaeu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772581985, "uuid": "1f458625-175c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "shre-v1.dachshreinsur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772577244, "uuid": "15aba313-1751-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sit-v1.savingssit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772549647, "uuid": "d44d5ace-1710-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "solarbase.suncrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772532966, "uuid": "fdc39fb2-16e9-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-ship-shop.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772551025, "uuid": "09bddd79-1714-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunflow.suncrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772567707, "uuid": "e0f19bd1-173a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trail-net.goldtrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772553785, "uuid": "770e4f72-171a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trail-v2.oaktrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772569624, "uuid": "577db718-173f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trail-x.goldtrail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772541847, "uuid": "aaf3b4f8-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us06web.zoom.us.vdns.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772579045, "uuid": "46d8b5ff-1755-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault08.savingssit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772561645, "uuid": "c3ccfebf-172c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-unit.windcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772565665, "uuid": "1ffa4afa-1736-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-v1.windcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772522046, "uuid": "90c2db07-16d0-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "zynova.infinityfree.me" } ] } }