{ "Event": { "published": true, "date": "2025-01-16", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-01-16", "timestamp": 1737072194, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "641db756-a5d2-42da-ab3e-2d26854b09c8", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1736985666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985666, "uuid": "d8e0fa8d-3851-4cf6-88f8-1a795f92b87c", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985666, "uuid": "18556c8f-7f3e-46ac-af3c-f21922e1d805", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985666, "uuid": "9dfa4ba1-41cd-49d3-b2a5-165098c9b211", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985666, "uuid": "239278a7-82b8-478b-9332-04b1200c969a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736985666, "uuid": "353bedec-5b89-47fd-8a5b-816657b08e34", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2059730-d38a-11ef-856f-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1736985712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985712, "uuid": "afc0a999-23c5-4476-8fe7-d4c9b3fc2696", "comment": "Malware payload (AsyncRAT)", "value": "b6b22a70852544e05d648d6d4015cb14", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xenorat", "colour": "#2f1141", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985712, "uuid": "a39cb4f7-9a58-42b5-87a1-91a06d45d201", "comment": "Malware payload (AsyncRAT)", "value": "835b9184f01bf0b6c60ce50d66e7897e18892b3f9e56b6303ef4929b2a1c05b2", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xenorat", "colour": "#2f1141", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985712, "uuid": "01c9cf5c-857e-4d85-95f4-d27bd0c28eac", "value": "T16D832BF616172E8F45270E40E90C1314ED9CEC6BB3D5D1E8BF498EA68E994588CA0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985712, "uuid": "0ca6df62-3cf3-4342-b0ad-0ae3614d8808", "value": "1536:Ya68kUWDIAVvIUYrIJzaYn+C02+pdN8+39zJgvvQcpZ+vV9/9cCr:Ya6/DttUYaY+Cf0dN8WDsvHOjr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736985712, "uuid": "d35eaf44-2b73-46fc-8f92-9a7e873dfd76", "value": 86017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985712, "uuid": "e1721e7f-befa-4072-b834-3e03fab45d28", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736985787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985787, "uuid": "33ce7cf5-dce8-4d6d-90aa-2d818b4c92e5", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985787, "uuid": "39bbccde-71d8-4988-b90e-6fe36de6477d", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985787, "uuid": "a81f1f5b-ec0c-4998-b4a0-724da409ebc6", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985787, "uuid": "02553c6d-ab67-423b-bde7-1f3e2ae840ed", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736985787, "uuid": "9caa56ab-7cfb-4b54-8c0a-cb5ef8c81ba9", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1736985966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985966, "uuid": "0b84f601-a42e-47c7-97fa-c8b48a148617", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985966, "uuid": "f94e2df0-329e-489a-a40f-1f59464006ad", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985966, "uuid": "e637e619-40aa-48cd-9e0c-7d1763bd7642", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985966, "uuid": "a6eb0e05-9e25-4ed0-ad84-c3335b5f7774", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736985966, "uuid": "890480dd-4900-464d-8791-00c332d30071", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1736986272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986272, "uuid": "f4c7cb1a-2db7-43f2-a8b6-6167242837c3", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986272, "uuid": "6bfccfd6-cf9e-4ea1-a04e-3decdab785b6", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986272, "uuid": "5a23d8c7-ab76-4c22-ad9c-8a2f1c8cee85", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986272, "uuid": "b2d77b77-226f-4253-8de3-785e365b8951", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736986272, "uuid": "a9844bcb-d71d-490c-90ec-911bcde5d723", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f2f420d-d38a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736986355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986355, "uuid": "d7b0f6af-1de5-469f-99aa-b033ceb10748", "comment": "Malware payload", "value": "6c0a5e219c707adba4bf3bcc8b4700f9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986355, "uuid": "92569f1c-c505-40ae-99ca-d3839e18e4e8", "comment": "Malware payload", "value": "7de3b88223a2b0583805c5e339fcfbc917b6b9fbd9d408e77a5487d943cfa6fd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986355, "uuid": "413a8266-df54-4978-806b-e23e35d5335e", "value": "T17C74BF5165F58C65FFF78B701678D6E02A7FBC636AB3858E3180328E39B369089513", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986355, "uuid": "f133417f-72a8-4baa-933e-e8f65e1f2aed", "value": "3fd1858da35efedfd501d45d47927ee1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986355, "uuid": "d5f93339-3ce5-47b6-b8bf-0c59c0d32342", "value": "6144:HF6OfaE9hTyiTrbopuS3SCtcBDQbgkJKb:lva6hLTrbo7tcpQbLJK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736986355, "uuid": "d0e71263-000e-4377-9827-58af4b8f686c", "value": 346624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986355, "uuid": "7d9002da-96f4-464a-bbec-f2eaa6830a03", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97260a33-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1736986515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986515, "uuid": "5af1acc7-627c-4a43-85d3-69d3037b596b", "comment": "Malware payload (Hajime)", "value": "b8ed2cb3e9fedec5b164ce84ad5a08d0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986515, "uuid": "0622d2da-3dd3-48cd-ac12-d730d7a6594f", "comment": "Malware payload (Hajime)", "value": "d5601202dff3017db238145ff21857415f663031aca9b3d534bec8991b12179a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986515, "uuid": "234ab2c4-c39c-440a-953a-5ede4f7c93ea", "value": "468312CFA4598B66EC7ACDF809DB59044D46621E738B75EF530CD59C2038B862C8E92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986515, "uuid": "b6e5fc4f-ff0f-421f-80f4-1303d5dd8547", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XuzGNy+iSc7tNUZM:mOE6PWo1T5bz4LVMXuzVNScWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736986515, "uuid": "a59d4d69-e42e-45b6-976d-835527017c2a", "value": 85128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736986746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986746, "uuid": "0e77a3df-a2a3-4f0e-9e50-b7f38212f3e3", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986746, "uuid": "a92b9214-f92a-40c2-8554-12a9ea0fb683", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986746, "uuid": "0c505096-9ada-426f-baee-f4db1d0f58c0", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986746, "uuid": "c9846fd2-53e1-48c5-994a-b64bce443de3", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736986746, "uuid": "6777fb40-2242-412b-a093-55103d6bb475", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a45bf2f-d39f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736986791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986791, "uuid": "5340bad9-9262-4c41-bc2f-1fcb31814e2c", "comment": "Malware payload", "value": "f2bb0e58b960c3d8a6b4c2441562d9f9", "object_relation": "md5", "Tag": [ { "name": "malware.heuristics", "colour": "#db4217", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986791, "uuid": "2bf759b4-6e99-4e29-b74c-16e1202611d0", "comment": "Malware payload", "value": "6d046c393bba7f177ddd0ae5d3771a17c99ffed2ec0e558b760cc5bd8cd4740b", "object_relation": "sha256", "Tag": [ { "name": "malware.heuristics", "colour": "#db4217", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986791, "uuid": "7488cdcd-7ecf-4478-be3c-c9047a143a9c", "value": "T1A8B633CD7DA21EE5F835C3F68502B86D706E33B349690D3979C81E016F0E10AA5B6F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986791, "uuid": "db3713e8-561d-4ac5-9538-28e9eb8b1f29", "value": "9c136bf92a5db1e55d13186ee9f9e1bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986791, "uuid": "a4d6c096-b52e-4752-b982-7d0e71636520", "value": "196608:jiYKQEft85mB9M7llR9MFWqvsRHKH2pfeVOVma1kFuJyKkNIN5LE2uPbsAv/bNMa:ji3Qct8IBE6AKW4YEa1xoK2MmpDZMMcx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736986791, "uuid": "1c8bfd18-60e8-4ec7-8ae7-93f16a25980e", "value": 11127808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986791, "uuid": "dd034920-365d-4d97-b87f-a75f7fcbbffc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f9807bc-d394-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1736986795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986795, "uuid": "48369a36-b596-4267-91fc-267bfbc9a4e5", "comment": "Malware payload (Adware.Generic)", "value": "e39a810369cb09e5ac516c17fb02a271", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986795, "uuid": "bd6a3e51-8e8d-4658-b380-ddb6e2ce0ea9", "comment": "Malware payload (Adware.Generic)", "value": "516401e7b17665f9de603eb5bcc0ddb52d3a311b36cfe5783dff8705b44f0e47", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986795, "uuid": "9cde1918-fbd7-4c07-97da-135d43343cd1", "value": "T120F5330B8FE2D1B4E4E606BDAC3605D4C66A6C5E0E750F3B352C17196F9B8EB0C472", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986795, "uuid": "a4fdde82-21f4-4060-a5f0-ea5e8fa8343f", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986795, "uuid": "55431521-cd2f-4523-9571-be72672f3612", "value": "98304:4F6c7pxoRKROVmfsI8z3bdGTb/ApCJin+UqxZE:w6czo0ROwfsI8zBIIpoLdzE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736986795, "uuid": "36e9040b-ce54-4514-8a7b-c2e70774ef1c", "value": 3636041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986795, "uuid": "0f3e489b-aea6-4a3b-a00d-be5153d81486", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33452258-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "05033cd7-7e42-4824-bd8e-31ad75f0a110", "comment": "Malware payload", "value": "729072d434efc76ae38bd736313e92d0", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "850d5f3c-5ca0-4e73-82c0-b39f8ea12cbb", "comment": "Malware payload", "value": "74917f49425d22b6e0f4dce3daa113d4c97901f5ac1718c328d09dd05c9d158e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "660ebec3-3e9a-40dc-aa48-52daebd560b5", "value": "T19344F17376B51FA0E122BDD51EAA53C1E4646C95E81EF071614E824B4ABFCCEC8A7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "9ff293c1-df5b-4fe0-a293-e5d63193e604", "value": "3072:1lYTj7bq/j0yLLa9FJy5LyP2VlioEmAegu66sbnk7eFIfyAI2/atWYkHwpvnR3Rl:YX7V9J0GPYliotf7DL6d2PM+1kVkCj1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "4d86a0eb-1b7e-4f6c-8ca8-0ad3d378c6b4", "value": 278085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "c7ab7c0d-c4a4-48dc-acd9-b1560740dddc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3345efb7-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "c8bd2fb4-a771-48c9-87f0-97db9ad168ba", "comment": "Malware payload", "value": "c184b546acd7a1117a866f4d03a51a37", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "6d55eb19-9ace-4d9f-98a4-94fb769b9549", "comment": "Malware payload", "value": "b2ab47ebf16ba59678fd018360814f400069bcef00b12cbd9367b6c62e50e885", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "610d09a3-e58a-4c58-9009-e308843ae9d2", "value": "T1D724E027DFA3339C795683C16F63D97F684D83C217E96F978F02D0A3607B6042A191", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "555c5000-a520-40b6-beeb-56874d5ae4f9", "value": "6144:j6n1FWuUcvH8Rgtp6+8KYGtOHGg24dB6Y53sqvv:j61FWkH8RYk+UmWd6qvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "f762190a-4e2d-444d-9b03-ea31e766ca0f", "value": 213060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "858d9af6-9ccf-4847-a8a8-719faa61206d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33607fb2-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "e2584ef7-ecad-4df1-9fe6-29d9f375d0de", "comment": "Malware payload", "value": "4567528ddb8444c07071178a1684f4da", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "4d940a59-16be-49b6-84ba-175a11206d6d", "comment": "Malware payload", "value": "afc3f655dfee4bc9f76c00a0c9ccffe310487a3c3394ea12037235e124139c28", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "fd8e271d-d15e-4730-9853-8f60e8d655db", "value": "T17034BDE30E7CBC6BA1C4141D2BE09F75AB6B0DE6F75407AB977E499122CE055DE0C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "fb148823-54ea-4520-ab10-2d2ec9d20c96", "value": "3072:dxUGU1gGPUJOdc+7NTwFPMA/Cc1jbzKObmRXvYxUfyFVfrJuVOlp5aYas:gGU1F1JNT+3qcZPnWXvk7JuVyp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "0a4f5490-5333-4ce6-b644-e9d867ebfae5", "value": 239690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "aeabbb25-3aec-4d40-9df8-c6d037ea3a3e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "337a273e-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "b6c2e3a4-9b60-490e-8c6f-5674f103fcc2", "comment": "Malware payload", "value": "25de019ce8f84c67304a3852e096aa3a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "4f222318-5e34-4d20-8ae7-0d9891be40ba", "comment": "Malware payload", "value": "43854166e2569ca0b74679cf491b21399b478238052afe387200f1cb3fc81a2f", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "c31eac25-fd77-4b9a-ad5a-0c1214321b32", "value": "T19E34E04858E7261F24B69DFE8E588B076D40677EEEF19C6A54187BC13B8B90ECC143", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "80523359-a17d-4492-8c6e-410050f2ff75", "value": "6144:QUHLk8RVlmazITP9PydCX68g8bhinkAX5YzsKLwV2sp:Q+LHnlvIxqdR8g8bkkzgDVtp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "faa270b8-63bb-4d9c-b6c4-e8e3f3ad9493", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "3f2d3fb2-b7f9-4bf8-a709-085688bc1fff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3382e017-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "acf471e1-cc4e-4b92-804f-7147a1c74d58", "comment": "Malware payload", "value": "4ec007dcaba180fa062849bb3896424c", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "6a7ecf79-e27e-4838-a7fa-d511566212e0", "comment": "Malware payload", "value": "f1a9a6a94e9b23d22864da2e8a70a6a2046147d4e376c8a4a439a14eea0f2a5f", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "5e1b5a08-5944-4cd4-a945-34cad50eba75", "value": "T18224CF925D071F966E1B89D22E7A2C94D9F3C18BB015D8023DC33AF0693DE5749EB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "189a3768-ec39-4b16-baaa-f911d3b02612", "value": "3072:oJru9iQELCHyTUa1VrOwJhS5viG5iQiiDXGxZeXpujZF1KNBQoMXW8Zr+:TcQELzAa1tJA5eo2neX4ZqNB0m8E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "69805dad-6067-48b6-be2c-84c20c48c37d", "value": 223295, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "a03ff8db-e87f-44ac-abf1-2e6031c69a12", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "338c42ce-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "aa7b45b1-5492-45c3-89c9-23e2e0540559", "comment": "Malware payload", "value": "ca3c505000e884422eabf46ed128cd3e", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "ac818e76-3bff-4194-80ca-140afa2dc795", "comment": "Malware payload", "value": "da316ab8a667c6040927659b2b4d08f0540cae442fe8a1523424ea227677925a", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "e2b6af02-44ff-4563-ae5c-d6cab1d71682", "value": "T18034BE85299CC9A5B809C5383CDF6B339F6963D1484F1FC843827641B0FAD51EA93A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "e0eb2ae0-fafb-4381-841a-fab5dee23dd2", "value": "6144:vQdHnDp9FKY1vgE9hJI0xRt5s5TzvMMtpXfolJkO:8PKEvguhW0xRDs5TzvMMtxsJkO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "00836d14-c913-40f8-8dff-eb19cf1b4450", "value": 239704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "f30ea158-89a5-467c-9e8f-e1cf07f2271a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3397676a-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "0ba02d7e-a0a7-485f-b6ac-06ff7c8cc7e7", "comment": "Malware payload", "value": "0fe07cc29ce9462b1359cd61b92037ed", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "4913e4ab-1d8f-41d8-925b-0bf42ff2c98b", "comment": "Malware payload", "value": "49c969c75afcdb451d80513de956acaacbc2abf44279040cabc1c390800dcde8", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "af76f52f-987d-482e-a760-5cd2972bc6c1", "value": "T1ED24AC936B8D01D5ABAA3B05048D3A1F14CB94CC2EF1CCF29DE7B83433AD915A9571", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "e34e7cd3-65d7-4c6f-811f-f168031984f3", "value": "6144:ej4ZMysaPZkBstwXy3du4558tvpGKpdYhub:t8VylGpGKH4ub", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "749a531d-136f-4151-8695-26baa9fdfb2f", "value": 223322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "575fb1bb-6744-4110-aa38-25961ca7ed98", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a86d59-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "3f64a4e0-4db3-4129-9986-fae4e4116aa5", "comment": "Malware payload", "value": "84f8354fcb51487332815d56242b5a0a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "dc3526f5-16f4-4f5f-a1e6-6e27143dd312", "comment": "Malware payload", "value": "a04a2664645c5a52baff8c89207543578f3123bdf4f962a118f88181c9887510", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "beb2a113-2f84-44c8-8dd6-848233542861", "value": "T1CA34CE044474629FE360AEF02ACC208BB4267643E7B5FEDFBA83FE59B615C18D944B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "a8ed6417-011b-40cf-8aef-53d08eb3b2bf", "value": "6144:KgCmmKLi9Q1WegzeEPHVRoiyWUdPlCBzzzD:KgCmNLi9iKFP1uiyWUHC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "762da413-b682-4bd1-ab05-afde1a2900a4", "value": 239696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "0b524691-fb1c-49bf-9377-334843478680", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33aa5f88-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "a09773c1-66fa-4fc7-a851-95535cc42260", "comment": "Malware payload", "value": "58e0244d2b3eb81ce69643f5d2df400d", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "515940fe-2bb7-43cf-b43e-e0bf84be28c1", "comment": "Malware payload", "value": "e80e6e68806ef66210d9a36025afe39a48c5267c32b054742e2cb9a7ebca9725", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "b3faa7d7-03ca-4a24-9833-091a14610ac0", "value": "T17F34BDEAEFCDEB39DE54F754C225D8C3B46CB1E4600466D8EA89E51B6E748B4C04A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "c7a355ef-0db3-4bc7-935c-89e917fc09b5", "value": "3072:OAkRoyTcVwdJvaVAbkkEPawx1sIvAqucqSg9kshp12uH+S4DBeK6afAplBma5Rrm:OAk74+SVCnwxpvA6qS0hD27txVKtrm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "89630a78-6d66-46fe-a281-4a32e31b10b7", "value": 239697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "18fc81bf-b160-4c46-8b02-9fab9e1727db", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33abd6a1-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "b8f3e8d8-e7cf-4beb-8756-b3e48d0161af", "comment": "Malware payload", "value": "7a6903cacf22314cedd6ae45c650af04", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "00ab7ef0-63ab-4f8d-84e6-440a7bf9e70f", "comment": "Malware payload", "value": "90bae44168712fd03184c02ba6cb7ab85f99ecedfbbc50f26090f0e7fe3f7b88", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "919d077b-1373-46cb-bb80-941132e1865d", "value": "T12D34F14D16B0D5E2A43717CB27028138C476B5CF97F0FB48C4F49AE9298BA311E6A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "b8d6cd08-5799-4d9f-bd9c-915242a537cf", "value": "6144:4lr4z7LCoUWMsI9MRAid/OY4s1v3udmjIo40mL:4hG3CpD9Mx9+0S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "f2bd8c51-e6a1-48d1-9354-22c37400ef9a", "value": 247875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "fccef48e-349f-4d3f-bbb2-4c77cc95fcb3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33b6c72e-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "c635e105-1026-44de-ba50-099f6bccc24c", "comment": "Malware payload", "value": "f6cd645f9c34789c5e8371e8b518871c", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "f75a1299-f1f6-49dc-857a-99c39f905c5e", "comment": "Malware payload", "value": "1a03d1b4b859424531b81e5c6e0278bad00f1995767d45055727d68de7cf3a3a", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "3a3ee302-29f5-4ab8-8493-a4232542911c", "value": "T1B034DF475659AAD102C9E96330B5CE5DA3626224C07DDD3E40766EBFCB265830FF2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "10445f94-9fe9-4170-a29c-53d477738ed8", "value": "3072:1seD1J+hg4waMDrtCnZl9ke2yAzST/2gmh0ak+hun5o80v59MWoFUZ777777777H:1FvigFrtCn3OeIougmh0f+QnAPMWmE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "3f308bc0-a1d2-468a-a09c-a0ae96ac0c95", "value": 239678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "b7316d64-e3f7-4134-aa8d-44732fc7dca3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33cadae0-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "5f003f41-8e7c-4c62-8398-69cd83ba5a32", "comment": "Malware payload", "value": "3c13a068b95e9caaac1eac86036b0e0f", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "6e7e933a-1b22-4d9e-ba52-3ca96502be51", "comment": "Malware payload", "value": "0d82c7c8e46ccd8e298524ccc93dff48f148b1e3cf065954902bf67d4c6440ad", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "d4b8ad41-bc35-4ea4-837a-e67514ea7d2f", "value": "T14B34ACA032E6B6BAE58F2C920D88F0534881261E5707AD755CDADC3F37DB76B8446F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "e11edc80-9c74-43b5-8a2c-09240fde5bcd", "value": "6144:UkLxVPOG1whTzv8sk1nMTgTLswKsL+fJW1S9q7XZUQCi7i4N/:UiJOqCbcpTLswKI+jsUQuS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "f06b7898-babe-43cb-a378-c32c95f5d037", "value": 239680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "a6fa095a-2364-40db-b7ea-e97651e5696a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33cbfc58-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "df181131-4238-40b9-8e88-2c46d4bc2a54", "comment": "Malware payload", "value": "c75657788f9a9982f12287ba169354b2", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "b6efcb34-db6b-4b3e-bd3e-41b78778533e", "comment": "Malware payload", "value": "f2e66fee3744341fbd435cc4734e9f77d1488f42a9346222b53afa4ba56b2cf7", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "2e167c8b-ff4b-43e9-83dd-91785f70bbf4", "value": "T18B34DF67B5FD8831969CD64AD8DDBE2F4D26D5FA0A0D380EC007E1AFC95939DE082C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "6a732201-01b8-4904-9897-510519a075f7", "value": "6144:M3SdapzVUbKMn7DERvK9zk76lXVYdH4LgF6qFEiO:Mt8bDnsRSU6lXV2ZB1O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987048, "uuid": "7ec0c172-75b5-450f-a9a9-376a170733a9", "value": 239684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987048, "uuid": "74a59a31-be5c-4aec-b1dd-43d6e0a9106d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4a4ae5c-d3a1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736987775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987775, "uuid": "e975318e-2b5b-46ee-8288-adc38c03e000", "comment": "Malware payload", "value": "c25c0e9b0cee4527080b55c9383d73ac", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987775, "uuid": "661acb79-3d77-4060-bfa0-b1f139c868a4", "comment": "Malware payload", "value": "fbb77f89e250ba8287eb2d4eb9982f74f9de8bde0272990b732c1b641b817b9b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987775, "uuid": "a78ae067-36cb-4566-af33-be5047807f82", "value": "T1A334ACD3580A0843FF610F47EE31A7504F70EA6E156BDDE852028A9EB6F97B2F6319", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987775, "uuid": "df018609-a8e3-416b-be61-1d2c1d953bd6", "value": "6144:2rFdZwmC1xNua8AWF/xMKnnnnnFZnTDqlTVzQv:KFxC3H8XLj6lhk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736987775, "uuid": "b65e8037-7fcd-41d7-9259-1495b45ca997", "value": 239703, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987775, "uuid": "88102d2f-067a-49e0-9b50-97df2c36d382", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da02d60b-d3a2-11ef-856f-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1736988186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988186, "uuid": "da983a6e-c98b-4031-a00e-874289ce9896", "comment": "Malware payload (LummaStealer)", "value": "02b948faeec194366df75d47258c0c7c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988186, "uuid": "3814be34-8392-440d-8a19-4d82dc3bb92f", "comment": "Malware payload (LummaStealer)", "value": "1ce8cc6b2616389e621e51367d70ef4d177e0bd128171a7f786f8419b89cfc01", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988186, "uuid": "0bbc4f0f-9399-4b18-baa4-3db0b03cc2f3", "value": "T15484CF217AF68026FFFB87755675A2A10A7B7C726A70818F3194321E1E336D19E723", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988186, "uuid": "40e90111-fac0-4d3d-bb76-7dc466fb5bc9", "value": "3fd1858da35efedfd501d45d47927ee1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988186, "uuid": "60928e34-9fe7-4cc4-8318-7aabb613efb6", "value": "6144:E7drcstvHT1AnlLAQJuJPznU7XISzsneh6zAS9IPbG2PoSr5b:JovRAnlLAQJUPzmd2eUsS9MbG2QSd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736988186, "uuid": "a575e408-ff53-4cf8-b96a-31b18fba8d81", "value": 400384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988186, "uuid": "04c6c840-ee52-457f-ad13-37613e6dee95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7b4794c-d3a5-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736989417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989417, "uuid": "cec8fdac-432f-4904-8560-1d6d61c9961d", "comment": "Malware payload", "value": "b9c33165fd5978315ed50d4146d6c8e1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989417, "uuid": "25b1bc9b-ab54-400c-9250-38540184467f", "comment": "Malware payload", "value": "2c019b0cf679b978f25f9b49457b3f466c093800b7d8c902b3294b0b51649baf", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989417, "uuid": "5aae32a1-5e21-4102-a90d-1c9bdc33c203", "value": "T1DD41C63052D8408EF1F1E24B7CB3311D93A98B6DE83D84A3616DC8A82B03E6088E10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989417, "uuid": "40156b56-7240-4676-a475-163b811689a7", "value": "48:nlG+Rp7T5TYrFbGckefwsxnA2tqlKTsfLBqemvwtKlJ2Kn:0SlT5TY0c/fws3ifLBqeQcKSI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736989417, "uuid": "efc743ae-d377-4e48-be9e-8c4bfca06e2c", "value": 1919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989417, "uuid": "3bc3d55a-a725-4770-b00b-8992ac3fd11e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5242aa-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736989822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989822, "uuid": "4515d86d-5f0a-40f5-ba93-8c438923dad4", "comment": "Malware payload", "value": "70e3f6b8302027cfd1a757e02252400a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989822, "uuid": "e12aefbe-52ca-4f04-9f7d-adbc3d50e527", "comment": "Malware payload", "value": "edd1e9268ff4961c7d0d2364d7215925d38852fa8646636d8edb3e97900e53ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989822, "uuid": "bd00d44a-b6b6-4958-89da-b9c1f38241a1", "value": "4C731229139924A5D63141F1E3FE1B88BE591FA9CEE1EC14BC117C98ED333AD2CD6518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989822, "uuid": "522f64e2-9437-45ff-8312-5907f6cb8382", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1d:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736989822, "uuid": "b6b0b784-7790-4cdc-b16d-d52e8b40ef62", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e57cc447-d3ac-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736992500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992500, "uuid": "1177da4c-88fa-42ae-9548-f7fdea6dca93", "comment": "Malware payload", "value": "851a75c4bafb387e73dc177187859ca8", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992500, "uuid": "2a38c1d8-bb86-4810-845b-612d30cd49f4", "comment": "Malware payload", "value": "e7f3423f361bf79d2a008b440a8ab8f2af0995ed6a373b9911bf1af4075a63d7", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736992500, "uuid": "fff0c91d-d317-4dbc-b81f-b09814252e7f", "value": "T1957412F799647E22CE18C5F582FA64B14C99FFCBAD9E0973C87F681A188622371705", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736992500, "uuid": "1dbd7e62-d44f-400f-b193-0657ccedd20a", "value": "6144:7QsZwl8J1P5a6hFSrX7zPZs6hvSzzB5E3JNrSCqjrhRj:UsIsfQ7BsHc3bGPj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736992500, "uuid": "7c6e7312-9556-47f2-b5f0-85556bcfee3d", "value": 363396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736992500, "uuid": "91960290-14be-490b-a2bc-a0812b8f1825", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2764281e-d3ac-11ef-856f-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1736993134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736993134, "uuid": "bd4a48c0-e87a-437b-8f97-664d90f2257f", "comment": "Malware payload (Stealc)", "value": "9cc7f39e4710c490b6b41ae933c7215a", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736993134, "uuid": "8055e7fb-9e93-4a44-8014-829c96898f46", "comment": "Malware payload (Stealc)", "value": "dbded8c9eac336236425d2aacbb54d5482c084f85966bb2c017d3e5f68cc05b0", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736993134, "uuid": "d37db8ff-6066-41b9-b1b0-da1b00b96f14", "value": "T13A8533F38BA78F2AD1ECB7F08A3F3B03811595385E4B519C078831A16A7772697563", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736993134, "uuid": "d1a19d35-2f6d-4e3b-a9f3-ff79614c47e9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736993134, "uuid": "0a235873-435e-490f-aae4-f8f9d89a1bf6", "value": "49152:2sN80PqIKpl7Pi/7IHe62bvmy4yjVm4o2ThwLWmfvOVT:2sa0PslL67Ue62b6N2T2/fW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736993134, "uuid": "d7cf68c2-04da-4b85-a236-540c67ce1afb", "value": 1835008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736993134, "uuid": "a980c3e6-f659-4e1f-8094-f501b9db9aa1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5eb390a-d3b1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736994568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994568, "uuid": "eaee1aa0-7a70-418e-9ecb-b65b06d8ca3f", "comment": "Malware payload", "value": "c8ad832c4a9a6160e176f074a927fbd6", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994568, "uuid": "f5d90f73-61b2-4f23-bddd-246fd068c179", "comment": "Malware payload", "value": "f91a1d1047f4422f566b664dc69a9beff5340ecde7240ec1f7a5a0fe51500622", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994568, "uuid": "bd78081d-d61f-43c4-bd05-d5f6f514879f", "value": "T10434E0A5AC2C2A74CAC3296DBC76DEAF869DC6138170F9169210EF1C7114FF1D8748", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994568, "uuid": "7857c6a5-4d83-4213-986a-faa7ef3af562", "value": "6144:V7v/nXiY0PfQjxzZd4kE2EYhLri7yw05nbvMHxALKXHAfm:JvfBmfQFn48Ri78nbvugCgfm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736994568, "uuid": "64c999ed-d026-4d41-9d81-5fc7ef2b1e86", "value": 247891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994568, "uuid": "a138603b-6ebc-45d8-b7f5-3cc94401885f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eaad7cf-d2f5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736995035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995035, "uuid": "dd19cf77-5178-47e9-bca6-9f15d67d1db1", "comment": "Malware payload (Mirai)", "value": "43ab360d2d1a5cce8ab3f0ae6336a3f3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995035, "uuid": "953438da-6a96-4648-b077-f1c56770b8bc", "comment": "Malware payload (Mirai)", "value": "e9bf3904b672f2f05d169cbacbfb53724e03c0768ec3eb418ee07b6ec13991c0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995035, "uuid": "00ab6bf6-6f51-4c04-b002-6bc86f510c9e", "value": "T1F2D3D71E2E218F6DF379C33587B74A31979873D226E1D685D26CE6101E6038EB40FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995035, "uuid": "1d743a67-8e7d-436a-a158-8cf38d15d4e8", "value": "3072:tgxcetLsbhmccPEMl6CFvFB0hYxV7xEr2KOuzrugjZnrWn/R6QntATG:Icsi0R7hvFjUzjsdtaG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736995035, "uuid": "8fa9fa8b-f09e-4cb4-94ae-8173d0f77e8b", "value": 136592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995035, "uuid": "43c011c8-007e-4452-8755-c0e72cba0b7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e00f787-d3b5-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736996192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996192, "uuid": "4b6c9036-da27-4e7f-be96-d84a20157a81", "comment": "Malware payload", "value": "4f0dd2681dccc0f9cf6a55c6e929c884", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996192, "uuid": "d8261941-32f8-4f86-92b1-f651be590218", "comment": "Malware payload", "value": "646032b67bcf696e36436a4c351398dcf40b96ffd2ce750f7a7c05555f9dbbb0", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996192, "uuid": "701380a2-f99e-4784-b554-fb60c6ca6eff", "value": "T12D53F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996192, "uuid": "5c1498d2-bbb0-4320-b778-6e3f02e8c813", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dhVR1X1t1RB1p+d02sAQ:aA1fho1P6n2PVR1X1t1RB1p+dV1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736996192, "uuid": "cd797cff-92cc-445d-a052-a931fb8cec6a", "value": 64430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996192, "uuid": "9de2719c-e888-46b7-81ff-42f21a3c210b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e012708b-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736996786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996786, "uuid": "0b3bd943-f780-4517-8c50-634cb9d68689", "comment": "Malware payload", "value": "aea0bcdbddbeabfde26f53671890d1b7", "object_relation": "md5", "Tag": [ { "name": "DBatLoader", "colour": "#7ddf5a", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996786, "uuid": "dda25a7d-18ac-4523-92ab-da93c45414a0", "comment": "Malware payload", "value": "4e38df6415cd9a8857c5ff4185da103fa8585e8a589ff2286eaf7317e3d10755", "object_relation": "sha256", "Tag": [ { "name": "DBatLoader", "colour": "#7ddf5a", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996786, "uuid": "4a6d5b88-5068-4af4-9ba7-b51a245dc99c", "value": "T165059EA36981883FC255163D5C159B8FA45FAE613B15B4CAF9E51E8C0A38F4E353E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996786, "uuid": "904a3dfe-7978-4c3c-8fa0-b111339dc877", "value": "af36c89e34274338c0a9e7164be74651", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996786, "uuid": "e4be5836-e372-464e-a2d6-b8b27db72a02", "value": "12288:aAm99652dKVsiJ9Pu8BHTN3KxxcycdnawpVdAorkBK1zmQ7HDEKDmC/E:7oqcKmiJ88ZZsTzOlIWznHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736996786, "uuid": "6a0a902f-123b-431e-b3a7-1871b6dc5880", "value": 854016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996786, "uuid": "a38758ae-08e9-418d-b0b2-ebaa0e019a8d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16141efa-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736998165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998165, "uuid": "fc7a5560-9016-49ab-b985-7ebf463d5518", "comment": "Malware payload", "value": "099eed3c68499b7a3c47075c0378ffe6", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998165, "uuid": "77c769ac-e950-4e73-a72c-597b10257b19", "comment": "Malware payload", "value": "4c97f58ba09cfee020a19dbb4a9ea27b439580a7f37b7f03aacbc3a593dfcf8f", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998165, "uuid": "e2f701bc-a5b9-4b7a-ab2f-20d77146e9cf", "value": "T1861633610A4F5672DB22CBFCD2155D2B1E0487762D7D82A069FDF8685E220E390395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998165, "uuid": "6220a02f-f040-4525-a2e1-11c66f1faff3", "value": "98304:1YxyiRLU1ZozOX+MxN1QQngWg3a5J/ijwi3f/Vh5Y:1YEiRywK+23g3S/ijT3V7Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736998165, "uuid": "72017de3-a5be-47b8-8adb-bd4b9849bb24", "value": 4141568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998165, "uuid": "bfae7330-42ff-43f8-9864-2179e4ce5373", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18317d0-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736998480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998480, "uuid": "11fb4d2e-cca1-4e80-854f-d5c37dff8ce3", "comment": "Malware payload", "value": "1bdf25ce38f3e20102cd0c699f8bd6b9", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998480, "uuid": "9083efc5-b760-42cc-8e01-d490215bcc21", "comment": "Malware payload", "value": "abe24859fbbf28eb76c1aaf67241f748031e9df3e3efb82bf230de85cb880b56", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998480, "uuid": "d782545e-4a0a-4a26-93cb-338220dbd524", "value": "T13C7412F36C987E46CD559AF50BE665A14CC2FFDF2CAE5472CA77282430C8129B2F09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998480, "uuid": "025c937f-b3f7-4b2e-a1d4-e3a7514d24dd", "value": "6144:91GTCMJ6YUPHS6hDSNRNVsQtPvs6hpSvUlEt5mQKqRTmdP3KDiT:jTtyBbtyjK2mMuT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736998480, "uuid": "f1bbac8c-f3e3-43aa-ab5f-b6b6731033b3", "value": 363394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998480, "uuid": "fd9451b0-c705-405d-a8a2-20d7ebf9cc1f", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ffcb2dc-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737001189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001189, "uuid": "3c3051c8-5f95-451a-9f8a-ec10f833665b", "comment": "Malware payload (Xorbot)", "value": "3b2b1ec0af67343c7dbdeb0e2734c0df", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001189, "uuid": "354b687b-6122-4890-9509-7098453bc989", "comment": "Malware payload (Xorbot)", "value": "84a24c2afed712fee151c1be09f7798a552421689423e00b9d13f45c3c270ea6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001189, "uuid": "9753d2fb-66ab-4bd7-9339-9ba91ec24432", "value": "T11B2243CA16403E378509ED291AB74514E58740C2DBDBBBE9DC493C69364BF9EFA0CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001189, "uuid": "f30de034-2d00-4786-b890-b07aa2c5e508", "value": "96:E8s/goUgrrMQp1X+OurHvYoUk9t8vJfVlTJfV/W5oUgrr2sF8/+cs63X+OurHTYf:+pp1iYoUk9t2JVmoUk9tc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737001189, "uuid": "e29eb778-9271-4887-9e46-268523b6459c", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001189, "uuid": "f1a4dede-9e3f-4210-a13c-3d34c352aed5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "223a6c51-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737001192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001192, "uuid": "fb448411-0b49-4c92-b107-2321b64894dc", "comment": "Malware payload (Mirai)", "value": "99caaa80319148083a98984fbffbaf75", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001192, "uuid": "4bde80ed-91e1-493c-ba1f-563d27c07e4c", "comment": "Malware payload (Mirai)", "value": "a74b0bcafe6686040db88de1d865d6302a3e306192422f3a9bf9303519e3b80e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001192, "uuid": "881cd6a2-3c73-46c5-ac9f-33f5300cb304", "value": "T1B5B3E94E2E219F7CFBA8823447B35B25A65C33A636E1C685D15DE6012E7024E741FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001192, "uuid": "df354100-95b9-435e-8a01-85b0bc8fb593", "value": "1536:IWSIYw56E7E/BO1br3BjrxS7vEPGEsfrQ4R8eBdml61d6eqsn:SyvE/BO9VjrxS7vEPGEsfc4Rnm4Zqsn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737001192, "uuid": "2a6bd276-1365-41b2-ad1c-8af54fb2b5e2", "value": 107484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001192, "uuid": "23408530-f0d2-46de-96fa-7086af5b4243", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a0ee003-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737001259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001259, "uuid": "7e07ca86-e406-4f5b-9366-2d2e8d56b9ea", "comment": "Malware payload", "value": "bffa5a058b9219e53035b9c122471663", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001259, "uuid": "e6f40335-5849-431f-aa67-cbf9d04b18dd", "comment": "Malware payload", "value": "aa23ce83e07c94be1e40fa1356a4393765f3da5c3dd2eda25227df5aae6a51ce", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001259, "uuid": "51caf343-dffc-45ec-b841-de9e6958d782", "value": "T1C224E1636ACFB29735D3E9417F6C63072817794A2492F9C642C599B88B92CC39341F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001259, "uuid": "a47fc67d-6707-4a82-9ddc-e6b7dcc6f4f8", "value": "6144:yGetSBIlKd6yoyCS43GZeJTFfaHwv02ybHB+:yGFBZdBoA42kvj6Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737001259, "uuid": "3ea9bc09-9a93-477c-a716-fa13aa58f2f5", "value": 213061, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001259, "uuid": "7be24db6-e646-4d4f-92fd-46c68fedc774", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "913a6f7c-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737001379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001379, "uuid": "31cf73b8-4f2a-4a6e-b532-904213447671", "comment": "Malware payload", "value": "536656f0ba388b4c1cc0df422024e543", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001379, "uuid": "ac74c712-6064-47e4-a786-b2e044acb251", "comment": "Malware payload", "value": "ac9a0d737a7a0e9980e2db058b513cb3f2c0da01b41355a441771375bb23c686", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001379, "uuid": "01534ab9-8500-4173-af95-b7af535a1779", "value": "T188F02447EB6998B6916013D8608CEA15F297836F8412E40FF573070D4F3603A231A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001379, "uuid": "c45b8c22-7692-4d0f-bf3a-dd00f3747632", "value": "12:1k1F+u7qoA1qQNMYMvbOTcMAQhooFjeBfvY:1k1FrRA1qQNMYXCaFjeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737001379, "uuid": "0386b24a-9c1b-42f2-8d33-11dc5ef581c1", "value": 512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001379, "uuid": "e716ab5b-d6a0-4898-946a-1bc392ff7b65", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61988ae6-d3c2-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737001728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001728, "uuid": "a2231875-f32f-45fb-99d6-e20db6983cff", "comment": "Malware payload (Mirai)", "value": "7cd6296808493721490a9fe7e5c91768", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001728, "uuid": "2869dc28-10ec-4b93-bea1-30bee090c87a", "comment": "Malware payload (Mirai)", "value": "da57c36263e84316c1ffcccf30f226e684afc70b51885445362ba28b7425f4f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001728, "uuid": "0ff918fe-9a25-4b17-aa82-26f3b6ee5216", "value": "T14623D706EF450FABCC6FDE3746AD065235CC548723A53B792274C938B65E50B8AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001728, "uuid": "f63e7481-f35a-49ff-9a3b-684614debe35", "value": "768:oKSXiI0eGt4eDnOSojGMykuU2Cr4e15AIUwcA05D8RvI:R3bt44RBMhERItx0Di", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737001728, "uuid": "2b3373d6-273b-46da-8d04-3d898b7d7866", "value": 46972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001728, "uuid": "abcfc5bf-34b1-4fbe-91fe-69c9aeeaa632", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b387cfc-d3c3-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737002040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002040, "uuid": "7e132920-ddaf-4105-a059-f741b3b4bcde", "comment": "Malware payload (Mirai)", "value": "bb5a31a2ad319bb1f3f2f40c11118185", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002040, "uuid": "6b028a93-d48d-4523-84b1-e23487f8b022", "comment": "Malware payload (Mirai)", "value": "98b317e31399106d9a9576bf0a32aa28c0adc4b26c330f996fb012d407e722ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002040, "uuid": "236c12de-875f-425f-be6a-a55481180505", "value": "T16923D8566A219FEDF16D863447B30B20A7B973D623E19684E2ACC5006F7038D546FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002040, "uuid": "c00877aa-ab37-4617-bebd-78966b4a86aa", "value": "384:bZ/HKfVJfNH8fHutj0rYDAsW8I1WS5UU3BHIeyuAXVZZEW1m2AKybH05n3TaaB+x:4fTfddj0mI1flBcZ7Lyb6RIPAOe+JOIb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737002040, "uuid": "3597f725-364c-4a8f-a9bb-ddc115514339", "value": 46972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002040, "uuid": "7f1babcf-f859-43d6-8585-da665e81c436", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cc0f91c-d3c3-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737002176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002176, "uuid": "4966f2bc-454e-444f-b577-6e89a88dfcfd", "comment": "Malware payload (Mirai)", "value": "a5ad111839d16f2c91489978644dbcd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002176, "uuid": "b7d90f37-f9f7-4f8b-a1aa-57d98d62049c", "comment": "Malware payload (Mirai)", "value": "e9278da5f51f700a2fb08a81f72586ad6c2cfcee4488c45e13b76c25c9d9b4df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002176, "uuid": "cf141ce5-5426-43a5-a10d-15cbbb3fab65", "value": "T1C0231896F9819B11D5C1117AFE4E124E7313077CE3DE73269E24AB30678797B0E3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002176, "uuid": "0ee907f5-0f0e-44d0-ba03-0cd44fd6ce0f", "value": "768:QKALdSw4rIssH9dlZEzJi/WvHmWrkiSnSKwhaDbN0iKpWpt5UYyBI:dYdb4rID/WeliSn8aD50iaq5UY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737002176, "uuid": "78eaea68-e281-408a-a93c-db1d86ad574c", "value": 50092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002176, "uuid": "6ad98fba-c25c-411c-9d4e-58185017045d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737002312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002312, "uuid": "59d6b865-ae06-4973-a4d5-f372a3fd9f9f", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002312, "uuid": "43062db2-8aa7-45ee-be47-16c76b6f5f79", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002312, "uuid": "2dae1d14-4d65-4ac6-82a5-f942a453ed30", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002312, "uuid": "a853413d-aade-4d1f-b9e9-520bea629a31", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737002312, "uuid": "004b33d6-faef-47dd-9c1f-e6f5371179a9", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "821f3362-d3c4-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737002642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002642, "uuid": "417c6319-33d9-4961-b5f1-9c968c261c20", "comment": "Malware payload (Mirai)", "value": "3cd1a6dd920504f427b843a85df3bfaf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002642, "uuid": "c3b1ef99-c20c-4f51-bcca-1fb7ce1f32eb", "comment": "Malware payload (Mirai)", "value": "6253a2fc1592cb56b4e02fb49e203fede42d16cf8c3d1825bba771b966adc37d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002642, "uuid": "f86988de-e47d-4876-a068-7f22d847156b", "value": "T1BB822942AA83D875DC6313B5DA7BAB026732E979F406FE46C77E1A318C1211087277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002642, "uuid": "d4da5df6-8d6a-4b92-904f-8a0baf903729", "value": "384:fmmE1LA9WxC0A6KydedHAJsO3hydo81tQCgKZu9xhGr:upxPAw01ORydo8/HZ+xhq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737002642, "uuid": "7b1dc010-a265-4d74-a5f0-8e922cb0d61d", "value": 18056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002642, "uuid": "c61b1080-e3c6-42e0-8832-6fce7830d54c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002642, "uuid": "05f1128a-e1f5-4d4d-8bbf-b09231877715", "value": "t1bc01f4e10f6204f93b92b48b96078743de0eadf34711a4cf80b6234237d3279c7226", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30d98ed5-d3c6-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737003364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003364, "uuid": "141384fe-410c-4956-958b-5cb41302bbac", "comment": "Malware payload (Mirai)", "value": "46f8859d0b7d514243f6f742922cb836", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003364, "uuid": "5562aff9-42a9-450d-97ad-8ad31bdfcf84", "comment": "Malware payload (Mirai)", "value": "ef4a3eb4fc065b58fd96b6e37f6902a01fc5a415a0e44ca4d59ccc4123b15289", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003364, "uuid": "90640e0e-ef3f-4503-a190-5bf65700d8f2", "value": "T154F22A95FD419B02C5C26577FF5F4348BB2A4358E2FB3307AA2A6F20378B9560E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003364, "uuid": "ee0bb896-ee73-4da9-b035-0563b95b9cf7", "value": "768:9MEf6tb3HGQjXKOupnEKmI0M/ew8mD9m+1w9fYI:9Dytb3pXKOu3//M2Y+Om", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737003364, "uuid": "75d49337-2d3a-4f93-a02f-70955f8e7174", "value": 34632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003364, "uuid": "c7fce99b-007a-4680-8743-bf2f155c9907", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82777ac2-d3c6-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737003501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003501, "uuid": "9f7c175d-f17b-4afb-a757-4cad0be88fdd", "comment": "Malware payload", "value": "25bc5d1f401421ebd79b2fcbbe49dac2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003501, "uuid": "9f3d32ae-9439-4023-80c6-19f46c4fda4d", "comment": "Malware payload", "value": "5f4ea3b52f243f7890303368b4a6878a507e426238e2d532c51a19dd97a75744", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003501, "uuid": "1a5fa577-0b08-4b24-95e1-54ccf1bba57b", "value": "T171118C1726F9AB06D3BB5B3242F382C04A257D717C02C30C42B8A99D54B1E18D8B5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003501, "uuid": "76c4d27b-f3c5-4e80-ac1d-95ba7de312fb", "value": "24:8+CMijkmA2RLQ/+ko4o04RgOkgbMeXk3kcx/l:8Lxu2xyorR/7kl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737003501, "uuid": "15174f74-2ceb-4f11-8a95-ceab42df67d8", "value": 1055, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003501, "uuid": "8da68fa1-6c57-4c9b-b182-93bc134e9930", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52172f7-d3c6-11ef-856f-82aee05be84a", "comment": "Malware payload (Matanbuchus)", "timestamp": 1737003667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003667, "uuid": "a5453ea4-928a-435f-95d9-96abc0891810", "comment": "Malware payload (Matanbuchus)", "value": "04089eb8f941dee4f0fbbfec314718d8", "object_relation": "md5", "Tag": [ { "name": "init-module", "colour": "#7af1b7", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003667, "uuid": "9d4eda32-10b8-4b17-b2fa-b5a58c00e6ea", "comment": "Malware payload (Matanbuchus)", "value": "96678cacc0550c86d40b54672c15d1d3e35743fddf3c2235c21ff636d4a8961d", "object_relation": "sha256", "Tag": [ { "name": "init-module", "colour": "#7af1b7", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003667, "uuid": "bfa06f85-02ad-46db-9785-92af935a64a0", "value": "T16E546B15F712E660E4AB0178BE14EBF9555D35300784E883B7C22FEA2A356E2DA35F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003667, "uuid": "76175b88-67ad-426d-93f6-8613f9a0f46f", "value": "91719dd2e867694a7eb88b493c8c3318", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003667, "uuid": "85b872fb-2550-4841-8e6a-5bc17b95aeff", "value": "6144:pVN7/lxioKLkbHwggs6bAVASkqM98IDsCDvhhKgsQb:N/lYjcHDeSkqV8jvhhK9i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737003667, "uuid": "84d57f63-c4c1-4cbc-ba8d-5ad4ca350bf0", "value": 281088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003667, "uuid": "0afeabad-e49b-4a07-bf2b-e27675ca15be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "976eba96-d3c4-11ef-856f-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737003846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003846, "uuid": "de618a4a-b3c7-409b-a0ef-8936152637f8", "comment": "Malware payload (Healer)", "value": "efe6ecf2daafaa40e77ed2bc5d351e3e", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003846, "uuid": "d29fbea4-08fc-40fd-ae88-56d8ea231e45", "comment": "Malware payload (Healer)", "value": "f9d558afcecbbc0aeb0e67f14181235ede8a91204191824c96391b8bf76e51a1", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003846, "uuid": "a87dd569-3964-4462-ae73-d2e15e722d32", "value": "T1AA8533D8AA29DE07F0CE13B725870FA16DFC5A53E0F2EDBCC606586C0A72D1ED5489", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003846, "uuid": "684a5850-7f1e-43ed-8cab-a13dc05d4886", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003846, "uuid": "bddd626b-e5fc-4bbc-ba7a-7a626ea570b4", "value": "49152:hus+DdxBR/6rUY55HD8xIfbhB9a+OxMtDYtp:UfdxBR/6gY5Oxmr9l7tDWp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737003846, "uuid": "5f544292-748b-47ae-94fe-45d73129799d", "value": 1736704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003846, "uuid": "35e17ff6-92b9-4108-bb65-aebbc64c6d9d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a18e4368-d3c4-11ef-856f-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1737003895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003895, "uuid": "c5309812-038d-4b2f-a1b3-db0a2e890bee", "comment": "Malware payload (Stealc)", "value": "7538a756f342b19f688b414c0b56db33", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003895, "uuid": "e2e4a958-7f71-47ce-944c-5d214df3225e", "comment": "Malware payload (Stealc)", "value": "5b2141890ab82f49ede79a9b094c31f004c5ed51b3c4b3768afde76d3c595749", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003895, "uuid": "8496c8b3-ffa9-4ca0-a6b0-baf0626e3dbc", "value": "T1CC85335C2D4623D0CE095FBFCF90CDBEAB942F485137F53E54C49358EB1A4AA87A08", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003895, "uuid": "737ea386-f453-433e-b073-bc3d9af86d72", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003895, "uuid": "257337be-a651-4992-b513-0e55739fe36d", "value": "49152:xHcuKPGHy8OJGLJumn11LC5qiHy1thVjzFHXA:ONP0/6GLJumn1pe6Njz9XA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737003895, "uuid": "07cb7f9f-b7bc-486d-9d3f-afc7f38ef355", "value": 1805312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003895, "uuid": "29e234e6-6c0e-4f1c-b02b-2cbdecc807de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1f80f82-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737004037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004037, "uuid": "fb0376ae-f503-4ed9-9da1-9761bcde15e0", "comment": "Malware payload (Mirai)", "value": "cbcfa62d829c0b4d62758889aa5c9fe6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004037, "uuid": "2eced56e-0f56-46ea-9c9f-0e96e0ffa839", "comment": "Malware payload (Mirai)", "value": "0188fd739d72e10cc6710d6f9abca86d2c087c8c4a4dfec3fd263d01f81e8224", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004037, "uuid": "896f84e7-544c-40b3-b3f6-b24e5ba8c4c8", "value": "T109837C22A9391E2BC0E0A07721F38715F2F5574E24E88B5E7DB10E8FBF2955036076", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004037, "uuid": "8bcc9c6e-b23a-4183-a312-905a31249371", "value": "1536:eJepjwtSyU2wBkAsSytx3oBMrjrJd6fIwftqnMWYk5nO6tSfo9VNN2zt:ov87Ux3oKtEfICQntYUnODumzt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737004037, "uuid": "441a8566-1962-43a2-af06-697c6db162bb", "value": 88384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004037, "uuid": "fe805443-7d6a-4d7b-80b9-c2d9cec40321", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c52c1265-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1737004043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004043, "uuid": "a395b22e-3e72-4ddf-bb40-ea67f059c5a2", "comment": "Malware payload (CredentialFlusher)", "value": "843360e7b554796b4a932d181ce8d6cc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004043, "uuid": "9bc2cd41-15c4-4d5c-8b30-246fc6deaebb", "comment": "Malware payload (CredentialFlusher)", "value": "03898ccb6e874a2c30d2034acfe8424b7438002c0db0b2fd00ed7748ba09ff54", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004043, "uuid": "f5f86a23-a288-4bef-8f18-e933c7a51c19", "value": "T1AB25AE027381C062FFAB92334F5AF6515BBC6A260123E61F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004043, "uuid": "fccb24f2-67e6-4596-bd25-bb2442077e6b", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004043, "uuid": "49696231-922d-49bb-a086-29891a04ceb3", "value": "24576:fqDEvCTbMWu7rQYlBQcBiT6rprG8aJed:fTvC/MTQYxsWR7aJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737004043, "uuid": "e8ac28ba-b561-4722-adf9-27184dba5d37", "value": 971264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004043, "uuid": "4f1edef2-8089-4496-9255-c090b5fb0d0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04585bb9-d3c9-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737004578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004578, "uuid": "032e8685-c5c5-4210-9774-0c8bb8ab3f1e", "comment": "Malware payload", "value": "aea53bcdb5f9f649d7abd27751d75831", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004578, "uuid": "56d8daad-7a2a-46f5-924f-3699b0d9fc14", "comment": "Malware payload", "value": "c699a7e27a591eefec34aad2c715fc8f4566c780678b2158a98c9df9fb07c890", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004578, "uuid": "3feb206c-75cf-422c-bf41-2644c1ef75ce", "value": "T1933533B3BF2E25C6DCC248BC55EBA0054F4F2FCF0E2059C792935A155AAC634E9396", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004578, "uuid": "3dc6dff8-d289-46bb-a6d1-91af1c3afd36", "value": "24576:RmMHIatkjnBt8Tnflbk4PjC+x2PCZv5SeFFfWncgUPdB89EGr:8MHy/IbkAjC+HZx9F15PdS9Dr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737004578, "uuid": "f9640b50-977c-4b27-9d1e-1e08fc588f53", "value": 1159037, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004578, "uuid": "05c713b6-369e-4df4-9b8f-2862892b13ef", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07e6cb6a-d3c9-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737004584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004584, "uuid": "7ef7b795-f591-4429-acf6-51d55a19fabe", "comment": "Malware payload (Mirai)", "value": "c933db3b514abfcd4ae14776ead2a612", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004584, "uuid": "cc15f46a-944a-482f-afab-c47823296118", "comment": "Malware payload (Mirai)", "value": "f33b022838b672afa953bfcccef8818c07a7882594a8b32a389f7a5d47c4a73b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004584, "uuid": "4c25922f-418c-4371-a146-a5ce7048c7a8", "value": "T166F24C41F30C0943D1A77EF03A3B37E0D3AFE69121E9EA44354EAA869172E315586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004584, "uuid": "dce5e1fa-33a8-48d6-b82d-ccf18f28aad5", "value": "768:/L9mGYd10urv/yw869h6g1P+2v+tBOV5Ihb:jyd10ATh6aG2mbOTUb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737004584, "uuid": "98f7284e-b77f-4a65-9334-41bc09fd6e28", "value": 35384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004584, "uuid": "0abbdf51-daa2-4cd1-b848-e89158737ed0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cb92bf2-d3ca-11ef-856f-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737005075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005075, "uuid": "0f7aa25d-7289-4200-a3c8-574c89b29a54", "comment": "Malware payload (Blackmoon)", "value": "a8cdc04f3c63e83fe0724b061bb7f94b", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005075, "uuid": "42483c98-9ee2-4a1b-a7c9-9017ba8af9a9", "comment": "Malware payload (Blackmoon)", "value": "fe9de22b43376af7061fb0451f5eeb7f70bd72a18a411856ca127fc89d9c90b5", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005075, "uuid": "928ecbc3-ad69-4052-b009-2d9625f434b9", "value": "T10765330B5A3497EEC8FB2432D6F5A3872FD2940A40429960FB7E1B7F51757AC6A448", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005075, "uuid": "6d53db7f-40ea-485e-ae3b-47705f349ec4", "value": "2e5f01e43a497b1cd096f44f6ff24f8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005075, "uuid": "8f09ed3c-21ab-4f73-9682-a7f5c9efc788", "value": "24576:nHFuAWYZVgtBVzgOXZ+6OrAiR6anAnqqTqtvapS5Z0roR28xTjhUHwUvf:YAdKnp+XrA7hnp8QS5WMM8xT1UQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737005075, "uuid": "a97b2ee3-0787-4903-8eee-afc9b49f2361", "value": 1473024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005075, "uuid": "3fb2faca-0add-4970-985e-b5d3154e80bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c837cb32-d3ca-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737005336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005336, "uuid": "82e869bb-8ae6-4b59-9f94-db1c2f4ca7be", "comment": "Malware payload", "value": "8e0546136951020c79dd85cfa7e034db", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005336, "uuid": "3655f1fc-c7bd-437e-bb54-4832b5852067", "comment": "Malware payload", "value": "e89518b4b99d7c356c97e80a400f874e7f92d1d66d5a0119bd03844c79a54346", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005336, "uuid": "fc05dca6-c3d9-420f-9977-720d7abe3987", "value": "T10E47DB8C0EB65EF8F265E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005336, "uuid": "587913ce-b94e-4020-a012-d9710aec0fdf", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrF:Nu/MEdS9plwx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737005336, "uuid": "ecbe22f2-ada1-460c-8167-94813fb40aa1", "value": 25591852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005336, "uuid": "1ee068c2-dead-4536-825c-d9ad6542b4ac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb6fe06-d3cb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737005802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005802, "uuid": "a7eacdb8-516d-46a5-a8c2-3803102a6efd", "comment": "Malware payload", "value": "16f8479e3ca5af25749227c9482f7e56", "object_relation": "md5", "Tag": [ { "name": "pumpar", "colour": "#2caaa6", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005802, "uuid": "0d69069b-1769-4de2-bb7d-93618972f20b", "comment": "Malware payload", "value": "84b29066936b7bbb41949974a62cd2dd51808b6d7e6305e25c37c54dcb7fae1e", "object_relation": "sha256", "Tag": [ { "name": "pumpar", "colour": "#2caaa6", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005802, "uuid": "52804636-c06e-49f3-bfa1-7a60a2c52a58", "value": "T103D52372B2C59B17C50738B506E83ADF0B6BC0455C778D8DBB98CFB8D29162C01AFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005802, "uuid": "28ea5708-54e9-4805-a0c5-627e71ec3ebb", "value": "24576:eIND4fhahUHUxkWH4CWASr0V88vLpTrW/7eaEET1:vND4pDHkTH4vLkVvW/7eadh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737005802, "uuid": "9e2d8364-eb6e-4753-81fb-6b876b3ace89", "value": 2826239, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005802, "uuid": "16a0d742-16cb-49d0-b864-bd70c76f0324", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3571aea-d3cb-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737005838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005838, "uuid": "4306a729-a325-4c8c-bdde-dfc1624dc680", "comment": "Malware payload (Adware.Generic)", "value": "5a014cdcc989242cbce463cac0662ab6", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005838, "uuid": "eea11456-8de5-42ae-8dcc-6947d4c17046", "comment": "Malware payload (Adware.Generic)", "value": "44cabf1ade193a507cb2db9095c8149a755e984ad360d0c8b09a1e03fce807fa", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005838, "uuid": "24aae8f1-d9d0-4b94-b5f6-29b02f78c769", "value": "T1BEF53359C8EB56BCF361F5B28D0895F6C2EB7E2019367C321D8DD1ADAB732454282F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005838, "uuid": "e7d2cec1-798d-46a9-ad24-a2a465d75a95", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005838, "uuid": "5ee04d97-ab44-44f5-b068-6978f08c0472", "value": "98304:4kkmyvZ0mhAEMGpEwcEl3oB+ZJgfCaFnKi8:VkhaKcy3oB+ZS6aFKr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737005838, "uuid": "41ef6eb4-f488-466d-b163-fc400099fe55", "value": 3631864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005838, "uuid": "ac40278c-e72e-42a1-b346-ac965fa5b3e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f718a79a-d3cb-11ef-856f-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737005844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005844, "uuid": "b17ce1f3-895b-4caf-9243-5918395ac7f6", "comment": "Malware payload (Blackmoon)", "value": "48e28c34a39acbd73a735d19acb0bc18", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005844, "uuid": "5f7c8e6e-6c52-4427-8655-7cf7cfb294ec", "comment": "Malware payload (Blackmoon)", "value": "6730414c9c5ed9fc7802736b8c7032c816b4436589fd951718a10227c5f2df43", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005844, "uuid": "4dddeb07-94e7-4823-835f-ac62939b9fe1", "value": "T1C7F433C1E2D91E6FE340A2B9D129859FC0D17449D9E8B37BC9319B91178F4E8C32EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005844, "uuid": "755d1fc3-3a6e-4f93-b59e-9ac0b96a34f2", "value": "987b6ca9dd5f926a72ce3178ed8a981d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005844, "uuid": "1535a237-571c-4400-8dd9-bfb366d2330b", "value": "12288:dIeVIpKaBdIyJfmlD2gui+tJ/FkAi5G+yd0ZbETDnWUgdQQKDTlTrJjOoS:dIYSBRJCki+tJOAVBd0STDWUgiPl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737005844, "uuid": "6a2ff897-be12-4bab-85c9-de7386407889", "value": 737792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005844, "uuid": "744a0ac1-52c4-493f-83a5-445b15ea4ae6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "103c6794-d3cc-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737005887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005887, "uuid": "5f22f243-d865-413d-88a6-c758e091a2c3", "comment": "Malware payload", "value": "a77b04310caa630f5cae95afde17cc59", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005887, "uuid": "06ac67d9-57ce-41f8-9432-00aca1d252c3", "comment": "Malware payload", "value": "dbd977d4f28b6b767a77c87ffa404b0244c576ece91d4e810f30ad34a73cc1f3", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005887, "uuid": "b8ed4c9f-98b1-464a-9988-31a0dc2f7c53", "value": "T13C54235E03F62A12327C1FB72851797F3C4DA382CA9C939469C5C0793BB36465E7A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005887, "uuid": "5f08b32b-b9f3-4e41-bf73-c22780301ee9", "value": "6144:k4IFgVRdpRR0GeSHpYPWMhQ6Cn7m0qbCeDN/obETuV/zA:bIFgPff0GN2U6C7ACeDQ5/zA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737005887, "uuid": "81e03d5f-53d0-405f-84be-346532f778dd", "value": 287808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005887, "uuid": "17ee4d09-9101-4ae6-9a58-8f2b70662f8a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b05b2d27-d3cc-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737006155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006155, "uuid": "d908e9aa-9b4b-44f7-937f-ee1f270c7344", "comment": "Malware payload (Adware.Generic)", "value": "e5c713f63b88984d2ca700472b586723", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006155, "uuid": "ecb385c9-63b6-45d4-89c7-ef9fe5e48d2f", "comment": "Malware payload (Adware.Generic)", "value": "f44218b4918342d3f4669926c502674ef25df08193b944ce6695c517e1bc4e75", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006155, "uuid": "f8256b2f-ed9c-4016-94ff-7a591212e586", "value": "T1E306333176A44AFBC13181318B329E29893C39A90D32B6E4778C2C7D7F427B52E767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006155, "uuid": "601ea3a3-fb2c-44fc-a9f0-ed13239e90b7", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006155, "uuid": "d87a988c-17f4-492d-bf91-113bedce6dde", "value": "98304:43I5qewcuVq6vaSRX+XzSVHD1y6wzHzbKi8:QYH7qq6XhyKDwbzGr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737006155, "uuid": "58689f14-10fe-4ee6-b63b-cac2a1ed2f50", "value": 3654662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006155, "uuid": "329f32d0-5e8c-4602-abeb-d7b51e7aac2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed5b2fce-d3cd-11ef-856f-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1737006687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006687, "uuid": "e41ac79c-1e01-4ee5-8cae-af011e39c3e7", "comment": "Malware payload (Stealc)", "value": "cba787c9827b6355780bb76cbc4f7bc0", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006687, "uuid": "737e63b8-2fa8-44b4-997e-ed3065350acb", "comment": "Malware payload (Stealc)", "value": "1459188d9f7c47c45413c98ba79eb662bcc19c7951b8e7d2e875820cd81e2ace", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006687, "uuid": "22c2c47c-c9c5-4ae4-beee-8d405f609672", "value": "T1478533536D41E9BAD148687613C7F1ABF1E82932914E66386F0146FC8EAFFD1EA5C0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006687, "uuid": "4512ce4c-540f-4470-bb95-1eea2f94cfbd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006687, "uuid": "bf6007d4-4c06-44ea-8331-388690157bf2", "value": "49152:3uyYYW9Y6wRIdzyMA15+m2y1STkxnyHfeM:KYW2RGzy3VSQxnmeM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737006687, "uuid": "f13b6e78-f480-40ef-bbba-be5a050c99ef", "value": 1799168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006687, "uuid": "a50c1b36-c406-4cbf-aff9-7850c5d99570", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fdd3908-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737007416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007416, "uuid": "ecfa9387-a463-4d4f-8552-5c8db2370bb6", "comment": "Malware payload (Mirai)", "value": "6b0150484e7bb8058c837e361ba0043c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007416, "uuid": "fa704550-fd1d-4b54-94de-5ffd5a359f18", "comment": "Malware payload (Mirai)", "value": "4308c69fe16efb544f85ac3106fb307e500070198e6c4f5e8443958c2df993d2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007416, "uuid": "c4346f2c-2895-41da-8c83-db4ac02f01cf", "value": "T15FB3E94E2E219F7CFBA8823447B35B25A65C33A636E1C685D15DE6012E7024E741FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007416, "uuid": "cd0e0078-702b-4d95-9d08-ab00050ce467", "value": "1536:IWSIYw56E7E/BO1bR3BjrxS7vEPGEsfrQ4R8eBdml61d6eqsn:SyvE/BO9/jrxS7vEPGEsfc4Rnm4Zqsn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737007416, "uuid": "76d834d4-cb21-43e0-b415-9b330dbc21ac", "value": 107484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007416, "uuid": "2ff38bca-9f3f-4703-875a-d46bd0cefe33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b48ea5ab-d3c9-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737007628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007628, "uuid": "e21b99a9-50cd-454a-abf7-06fc6f1981a5", "comment": "Malware payload", "value": "e110c7357dc70bc9303780ceb9f5f514", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007628, "uuid": "d2c70bf0-966f-432b-9c73-7433cb47aa5a", "comment": "Malware payload", "value": "e632e41ba3c5b145b429375d9280ea915c6994331b0c22141fba86b50988b6f8", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007628, "uuid": "5fb7a517-1d8e-40d1-9af4-517e2d45889a", "value": "T1727412F6E4583E82CE191DF986B471B16C8EEFDF6C95147AE86B2D2C28E425135F40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007628, "uuid": "301c79ad-7549-420f-9d72-238ab7db3676", "value": "6144:wO68jhffPsPnS6hrSPpV7+XUPXa6hjS3dB+ALvBTrn5QR7IYT:wObhfKKRx+XSaNtLJrn07bT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737007628, "uuid": "318a8ca0-db3c-4c1c-ab47-3968861d98fe", "value": 363464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007628, "uuid": "76db6bcd-6bff-4669-a98d-65c7e64451ea", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "837302d8-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "57fa01ab-570d-40b1-8066-b4b54a3ce680", "comment": "Malware payload (Mirai)", "value": "fd0f7f1dff734fe7b996622455db32db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "92aee347-a7cc-4d39-9780-ea85160121ab", "comment": "Malware payload (Mirai)", "value": "ed31d30de59766a1c60ebeb823fcddb1768c6f83fc21a993c68ffa40229c715d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "ef922aac-44a3-4d56-9bb9-0fb922f0e688", "value": "T1D63302616BAE79E191F09777FC32FC5A92AC17F8986730D628E0A61573C48014EF26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "a47c47ff-f605-42a2-b83d-a52349ee4601", "value": "1536:69O/ZMAXIxNUk0qLcPqF1aBexo4opKZb8:69O/ZNKy2LGqFUFF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008227, "uuid": "9352a56c-0b06-42a1-b42b-1534252d71a2", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "d74c108c-2e8b-4f7b-9e70-426b4723a5cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8374c566-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "ef300986-2c96-411f-b0a2-cdbb3f0b5e9e", "comment": "Malware payload (Mirai)", "value": "b7205322bde15f273eb90e0db7d11778", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "9fdfea89-a311-4dd2-b6e9-ab5a20945e5a", "comment": "Malware payload (Mirai)", "value": "1efea78b821254ed06fe0837bfa51c4d0980a6bd3123c6af526201a94da032cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "e6fe7d28-0874-4087-aa4b-49b4ebace962", "value": "T1C0E2F267C372B451DD7827F2F99A8AC62A7D0BACC57730A2160517282A5F0535F3C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "ce98819b-2219-45ea-ad46-de2f5f068316", "value": "768:PoiWiO031vpAPbrVWZK3XVGxm9XyQ9q3UEL5Ix:Porm1vpALgUJyZLK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008227, "uuid": "c6239f61-4456-4024-afa3-91f54610a154", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "ae7242c8-500f-43d2-807f-b2a752b6ea1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "837ab3d9-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "87e7c3a7-4515-42d8-a4b2-c30f5dd437c5", "comment": "Malware payload (Mirai)", "value": "72e562cd5165808264c81dc9068dbdf8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "f6c4a62b-cb70-4e96-a996-696ff80a4929", "comment": "Malware payload (Mirai)", "value": "83d3cf3a072a6c9e9630ba36f835077423f731512c8f0357c145fc778d49e769", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "e4e68129-adf9-4ee2-9b31-bf783749009a", "value": "T1D7B2D0A48BA4570AC670B435A27CCF926E3B15E4C1F539262B2093FCE69145632FCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "d0779bce-887f-408f-9216-bc31c59104f7", "value": "384:4GaKXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+BK/GhymdGUop5hu79:4GaKQFH0rs3zWoDDRsjt7LB9U+BXs3UR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008227, "uuid": "2c4c7842-5590-4d87-8fd9-dddf0fc68465", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "f446801d-6768-46d6-bd4b-00c6635b37eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "837e6ef6-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "1f0b3de5-928d-4f09-889a-8ae3a6b125f9", "comment": "Malware payload (Mirai)", "value": "13343570b46d100d8964256079639ab7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "d469d75a-a8ad-4020-b5d6-8f808506502e", "comment": "Malware payload (Mirai)", "value": "e856f2920718a6f0a1e8c408bbd2ce7dd1dfd070132ea242edded49cc41f23fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "a459a512-657d-4d51-bb42-75d811b84fd1", "value": "T17BC2E1AF7A956A57FA5C233DE035811B03A5F51C5BAE674B37404433E98E82D7532C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "d7cec948-5738-4b52-ab23-37c6331205b1", "value": "384:Mg1DMwk8JPyGnT8WyopNEutTneSe3oECHjYlQ2NnE4+0o8tm3HWBKENAZHSuT9N/:RMwxdyoEUnDz+Y8tqHWXmyY20Nf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008227, "uuid": "3f2e80c0-dbf3-49f7-87cf-850dbbd6d26f", "value": 28048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008227, "uuid": "76e2e28e-829a-481f-80b3-92a6087c28fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8386b5cb-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "9a8a3898-337b-4929-88d9-4d19f5a7d07c", "comment": "Malware payload (Mirai)", "value": "88e90c748b2b7ed1f6eedc78f025e142", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "117b2a6c-8bb1-4a95-92ab-11955d6bf524", "comment": "Malware payload (Mirai)", "value": "50d1d419239767ffce6d64e56462a39ef5249a13f1ceac63cc283eb83e657269", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "d993a64b-e24c-4b34-b94e-a96d425a5e3b", "value": "T1FB535CC6B8119E7DF5CBE6BE84224D0EB821722150931B27BB6FFC837D731648956E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "dcb25268-79ca-4bf0-a3e6-415c24b4e278", "value": "1536:AXyRgQFTTbSX5dhLepSGYacFuxYhON2PPB+qG76E8t:N1GjR8EVGOn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008228, "uuid": "28a1e2d5-10f2-4ff2-bcef-39477727058c", "value": 66504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "98633506-16ec-4fc2-acd6-7166ade0edf4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838da062-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "1517289b-04f2-4fa6-b008-540d5bbfe538", "comment": "Malware payload (Mirai)", "value": "96039e367ccfcebae2244a8ee8e2962d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "71d8d068-e43e-4432-af9f-7e00c3d85223", "comment": "Malware payload (Mirai)", "value": "06111b92d401d1aba9f64fd68741a9d3afd2cd5ef23f0706a5ae254ade052b98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "2ef8e39e-f390-4de5-831b-56e91bac81af", "value": "T151D2E12CC55D7D05C6AD3EBD51CD96B9284CB0C0A35DE5CE27268408BA27F87BC071", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "e599907d-0b16-4543-872d-682c57cfa727", "value": "768:11uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KN1bpJbiWU4:1bDs06t4BEub4sU/MbU1bpm4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008228, "uuid": "709bf08a-5676-48b7-8fd4-5d048d01225e", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "91afe711-506d-45d6-b9a5-246a8b4a4ca2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838f69e0-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "4e4043cd-ed1d-4a86-86b7-0eada95a82b2", "comment": "Malware payload (Mirai)", "value": "c645a2e67c1a106a7697b1661aad20b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "4bc3addf-39cb-4497-86ac-8ae0a49828d2", "comment": "Malware payload (Mirai)", "value": "2bb13ca41f202f2df39e684ec3971d0106a225e8fbd367448385ed2b8a8a217d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "f8369907-1aa9-4ed6-aca0-ed2561ac3a89", "value": "T107539FA5C5ACAE58CB1441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "736b4eaa-4ae9-415c-a7e1-d7b256ed2fc4", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008228, "uuid": "6ed6ad30-d531-4e22-9a11-ab83eab559f5", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "a02a5532-e69d-4575-b767-e8ba57e2aea1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8394f5ed-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "6b8a4b3a-00a7-44d0-b568-751a1b5e8e4f", "comment": "Malware payload (Mirai)", "value": "90e8875ebde816a2af6a1ff2326e59f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "aab50607-2517-49b2-aee7-23b5d7b75c59", "comment": "Malware payload (Mirai)", "value": "b8c3ab7172be87a34cdf554577f0d53f54299433a4bdda60afca167c27b56b26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "dcbb1b5c-e299-45d2-b00d-457340e4d0ff", "value": "T10CD2E0B91B074BCADD9FD8F9C3E413A015660A126903FD4AB0ECC7476B6B9C0A547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "a4d303b1-1452-46bf-9cc0-d73b017a3e96", "value": "768:yxMWBhAHuLegF1aF4NscfOl8liVvF+lTJgGlzDpbuR1Je:yxdBGuLea19acfjli/cVJuk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008228, "uuid": "3abd53f8-a5e0-44b2-8c60-880611bf56da", "value": 29412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "ec8477fb-378d-4d1b-a7de-4034925fb062", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "839b59b5-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "d451c79b-8b83-4477-b70c-18f22ce96496", "comment": "Malware payload (Mirai)", "value": "8d1e5bce4e49830ab8d1df3a845efb65", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "31793e4c-abed-4fe3-b01f-96c7b4ac376a", "comment": "Malware payload (Mirai)", "value": "e320ae4823f0a641313ce2ea89737b3e0cc36bde25f10f6e15096668e3c5a2c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "bbb5a789-eaac-42a9-97d8-437754b0fb98", "value": "T108D2D0A985E7F1BCD0FA7AB5003D0AC5FD76B256C1194BB708E864B6DE470D80D30E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "7e3ce66f-56b9-430e-8365-56700ac36056", "value": "768:NYSoXdJZETc51aBfdNRQkHy3xWEMcw6qBAqpSx0sA:NYJdJZiy1aBnQfTqB9UtA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008228, "uuid": "97492503-eaed-49f6-b78d-70df030063d5", "value": 29440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "0313d4a3-8004-4fdb-a963-e3f174384243", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83a43775-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "754d91e5-3c4e-4193-8175-bf01c21f41ad", "comment": "Malware payload (Mirai)", "value": "d12e81ebcc6f37e5c0e1cdefaf4aa064", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "528eabe8-f023-4979-adc8-87eb10408e5e", "comment": "Malware payload (Mirai)", "value": "20c111e2e0b0ceed5900aaf453fcab2ea12b61d48001f86501970af01ce97895", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "a27f1a5f-7e05-41c9-bcb8-3cd68259fcad", "value": "T116C2D03092A92CB1C7500572F7B86ACABA434F7DEAFA3C90114057FB7942D192DDA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "d1fc1fca-e294-4f3b-bd36-915235b8316c", "value": "384:Aot/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEuNozQhymdGUop5hI:A8soTAZ3alkXLvFh8nNEuezQs3Uoz+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008228, "uuid": "c9328c0d-28bc-4a42-a33b-2fe5a59203c6", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008228, "uuid": "cdf36979-291f-4fad-8ad6-cc87dedcbd69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8fc9740-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008398, "uuid": "214d2dd1-1f8f-4e89-be0f-318d1641a706", "comment": "Malware payload (Mirai)", "value": "27b71237120975fe15c23d735343e191", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008398, "uuid": "246246bd-ce7c-446c-a5ff-8c31135bdaa5", "comment": "Malware payload (Mirai)", "value": "08966e60ad7d0492609b553f10d39c589d2ab998e7ed566813c32927f059c8c9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008398, "uuid": "e1275f22-51aa-49cb-8958-b7c9d522b4b7", "value": "T19DF35B46FA418A13C0D52776BAEF42493322A764D3DB33069D18AFF43F8679E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008398, "uuid": "6db4f461-3a9d-4fed-9429-e23455f245ea", "value": "3072:HUvDiabnHQiS3AalhgyCv/097HjvNMI4vM++ewAM/9lnVao:HUvmabHQAalhgyCHo3NsM++eTM/9ln4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008398, "uuid": "877d7872-9591-4847-97c6-0de620a79a9b", "value": 168021, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008398, "uuid": "cf71712c-ae2c-4ccf-8013-64d69a0f33c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfaeb421-d3d2-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737008812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008812, "uuid": "cb5136b6-8a32-47e5-be7a-ff1332f053ad", "comment": "Malware payload (Mirai)", "value": "756bffeee0480cd560b6a2f5327ab1bd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008812, "uuid": "0aab1acd-187a-413d-983c-66f769da75cb", "comment": "Malware payload (Mirai)", "value": "0530937b06a931da45a5854c270e299ed87cb18e3e2f75ea16c4b1e05c28aa5f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008812, "uuid": "05167cbe-d7c4-4e64-b3d0-a57d29749afc", "value": "T190837C22A9391E2BC0E0A07721F38715F2F5574E25E88B5E7DB10E8FBF2955036076", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008812, "uuid": "9ad0dcfb-173f-4d8a-9de2-0df29599c801", "value": "1536:eJepjwtSyU2wBkAsSytx3oB+rjrJd6fIwftqnMWYk5nO6tSfo9VNN2zt:ov87Ux3oktEfICQntYUnODumzt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737008812, "uuid": "b5aadaf6-bb8e-4c1e-959f-1c99d853df0a", "value": 88384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008812, "uuid": "add84376-3d25-4c3c-83ef-3814e80a27ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae348e6-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737009091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009091, "uuid": "7de73dff-cd49-4523-9268-dbd3172fe89f", "comment": "Malware payload", "value": "ad8405305d6ded879f133f04734db440", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009091, "uuid": "e2f6d302-5d01-44c8-bcd9-a75deb9150da", "comment": "Malware payload", "value": "ffbf6398d6005999f74454b14e7c81ce9ee5cc1a9305a4b39e2e0c03e508d2c8", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009091, "uuid": "2fe932ea-8433-46d6-9911-d7f4c138b674", "value": "T1CD8533185A70EF34F64C12354FF7AB9A71AD61328DE182954F4F26BD143A2C22B056", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009091, "uuid": "7aa039a9-dc8f-4a5b-a777-e7541e7845a5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009091, "uuid": "a9f5c318-54e9-4e43-aa94-39e42fdb1a98", "value": "49152:QgfGCPWVDqCx2NJ/+2/CAtK7QpHK38DV5qnQa8CtbaxW:F+CuVqCMN1+2KAWZsTGtb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009091, "uuid": "9101f344-f237-4f6c-a186-5221099dcff6", "value": 1862656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009091, "uuid": "8b15f722-10c5-4f17-a39f-17ec3f7ae7f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9088c135-d3d4-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737009538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009538, "uuid": "696a313f-78c0-4f40-ad16-e31d7ca4559e", "comment": "Malware payload (Mirai)", "value": "1829a100f9c7b0564d194c315a7b5ac9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009538, "uuid": "d4690925-f79a-4c5d-ab2a-305996af18a0", "comment": "Malware payload (Mirai)", "value": "4fb97899f26e6715a1bb345de563a5379532e10f28b03df103a194f4c713988a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009538, "uuid": "987f06ee-c5d2-48f1-bed2-3fb1da564475", "value": "T19D833B42BD815A13D6D513BBFB6E018D372A63A4E2DE3203DD256F21738A92F0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009538, "uuid": "c6c12a5a-15ce-4942-9376-970f51386b84", "value": "1536:qpB2MuSQpjYeOeRdQEhuHXzirrIpjtTK2GyvqHPzY9Jl61d68I:qpGSEYeOeRdNkLjJK2Vqvzw4vI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009538, "uuid": "42789eb3-28e2-4780-affe-b6900592416c", "value": 85304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009538, "uuid": "d9a73f77-ced2-47bf-a628-481a8594e873", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16f41eaa-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737009580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009580, "uuid": "e242b02a-45e5-46c4-be7c-4749a4c10eaa", "comment": "Malware payload", "value": "b7c1fb454c8c20aa7fe7aeb6180d412f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009580, "uuid": "e9575810-9300-4fc3-854b-865a4b3e7de3", "comment": "Malware payload", "value": "810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009580, "uuid": "9601a544-ef30-4ee1-bc4c-0dbf63003a91", "value": "B9B2E18622993703A4635AF4F27D7F8A72067D68AFBE943B45503123707321E6758C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009580, "uuid": "1272588a-cc27-476f-9391-3c9ab5dc12c6", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9LrEQSXh:YTYIDfYG6ZmewZ59+Nw1qsREHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009580, "uuid": "a8a4ec5d-87f8-4b27-9d22-d95fe30d72bb", "value": 24616, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7d2093a-d3d4-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737009604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009604, "uuid": "a09daf27-eceb-4ebc-b61a-71fce92ae529", "comment": "Malware payload (Mirai)", "value": "2f98a41081b33bcc00cb3dee74ba8ad6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009604, "uuid": "08ac29df-16d4-443f-834b-b7dacfbe327b", "comment": "Malware payload (Mirai)", "value": "582a23a571182f3ab5edd39d9eae6b20de1fd0d5a97ec5c29b99a8029d80db26", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009604, "uuid": "39bba573-474e-4c9d-b628-dab53a98cb3c", "value": "T1EA739DB7E4297EA4C0895174A5A08D7C6B23D40191E30EF69EA7C7A74007FECF5193", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009604, "uuid": "97eed7f2-1444-4a45-84e4-133d9511adf9", "value": "1536:MB/ccj+J86aJwtoD+u38GGm2CV8qTKKYun+gJORYCycKtl61d68IQ+:ckc+zy9+u3BGm2UNYwORYrt4vIQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009604, "uuid": "72b70609-4929-46f8-ba50-65a8989c59c3", "value": 76936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009604, "uuid": "9d6c983e-0ec1-4373-9e3b-f1b4c9e3fb8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb425de-d286-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737009725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009725, "uuid": "b2c3b8fa-4fa0-4681-92a2-21124d6f5dee", "comment": "Malware payload (Mirai)", "value": "a067e5cb4a56908848598d0123853fee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009725, "uuid": "f8489de3-3e50-451a-b04e-07ea172c11b3", "comment": "Malware payload (Mirai)", "value": "e3dabac03107e604decfe855df5ea922e44fad1bf55382472a3ab9d949ebcca7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009725, "uuid": "a30ecc0a-59d0-4c5c-ab28-dc63c009bab5", "value": "T140430213824921A7ED25CD3B831B8A51BB2BEE7650F0B0351468D9BE76F7014F7379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009725, "uuid": "359af4e3-80e4-441d-a598-ff2bca7f6d8b", "value": "1536:x9EaxER9c8SQe4vY6nKSNEFCPN5k4X8nKBan7xNd:jVW/cyT9PN557a7xNd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009725, "uuid": "9c9029b5-35b9-4cc2-bcbf-cfb9022416df", "value": 58472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009725, "uuid": "02754d57-6e52-437c-b917-5b6a008a9e52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5de8f0f3-d3d5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737009882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009882, "uuid": "c990639d-61d6-464c-82f7-d8a147eef1cf", "comment": "Malware payload (Mirai)", "value": "0f63f0a1140c72fcda6e8fed05dadbfe", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009882, "uuid": "10ca2986-9c5a-47a0-87cb-a0f985b94a66", "comment": "Malware payload (Mirai)", "value": "5e579eab1ed72088e03bf1a462e9022551d463b42a40f12be45fc4451b5a4215", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009882, "uuid": "f87a8a68-51f8-4845-8b56-4e3818bb0765", "value": "T1FEB3D509BF610FF7F8AFCC3B4AE91701288C651A21A93B757974D818F24B64B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009882, "uuid": "2a2b95d8-3ba3-4b78-a09b-e1f2ad72a7c9", "value": "1536:jyuo5zfiQN84NeR+QMBpx5AJltiwsGZMaKVHM7l61d6Om2flDH:2uQzfiQNT6tcGCQ4Jm+1H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009882, "uuid": "9144242f-bfff-4526-b620-949732f71923", "value": 109532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009882, "uuid": "870b8e3e-4c0f-4a5c-9335-34160b45d7fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "859595dd-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737009978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009978, "uuid": "04e69ead-1ea3-416f-bdd6-e689b8655586", "comment": "Malware payload (Adware.Generic)", "value": "d1612b7b8dbb4b10e1e4c1f7b2b57a50", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009978, "uuid": "79bbf49f-9070-4d9b-a677-997ae0fca518", "comment": "Malware payload (Adware.Generic)", "value": "534313f3e7cacde5f65957661b2e4cd9edb02903f5229a8c9c5f84a41674abb1", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009978, "uuid": "0a9165d0-b094-45e0-abc2-ce9293caae03", "value": "T1EE0633072A481176F5DBDF711C5AF0841A5DBB2D28F4B86FF25DB8E9B33A149163C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009978, "uuid": "4b1fd37a-0efa-4681-acf1-e5a67264803e", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009978, "uuid": "616e50b7-5eb2-41c1-b7d7-37c961474a66", "value": "98304:4EyFoLIBsH6wo7RJBugKtoPjS/ljjjhiHAmJc4WF2GkpHBMKi8:cFoLIa5o7RJHKtMavj2LcEjHBjr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009978, "uuid": "d15118bb-2454-435f-bfb5-9cae8be671f8", "value": 3663097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009978, "uuid": "245e9754-3ac5-49f6-a0b1-5c81eca7bbe8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcb2634f-d3d0-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737009980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009980, "uuid": "a9b58282-9cd8-4358-a8ae-b48ecc4997be", "comment": "Malware payload (Mirai)", "value": "5eeea1990e79c7d3723dedccf19e7d80", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009980, "uuid": "b4a60cfc-0f69-46e6-b23b-a0debdac0053", "comment": "Malware payload (Mirai)", "value": "f7cbd9e5ce8f493df263db2b9176fbf00550b44b9084979093f3ebec72ac3820", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009980, "uuid": "6ca3fcb6-623f-4eee-a27a-5f9679595be3", "value": "T1AB934A96FD818A11D5C513BAFA2D118E33131778E2DE7222DD10AF2173CA96F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009980, "uuid": "36f9e7ed-ed71-4b18-ab13-6896a497d4ac", "value": "1536:VOnk+RM4cr8fVgESZAFJyfFL1upo0FNKkX9xgayQo0QWMkiv24Gz6D5bYBl61d60:v8M43MZnfN1uphX9xgay72Rz6DF24v9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737009980, "uuid": "399c8a64-7dc8-4f5b-926d-c86ec5b99b96", "value": 94552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009980, "uuid": "b50cacd0-d91a-4140-95a7-16587ec6b81c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c05ccfc1-d3d7-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737010907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010907, "uuid": "71b3aa4c-1009-4060-83b0-3950bb310a70", "comment": "Malware payload (Mirai)", "value": "bc8d842a5b962c04f5782d647eef8a02", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010907, "uuid": "d542a171-013b-41e2-b693-b4b22782e0e2", "comment": "Malware payload (Mirai)", "value": "1930cd33eacd9a6cf0566078efed1c37a11a42be4ea0e50670eff09542482b89", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010907, "uuid": "fc91c03a-6262-46fc-97fe-08b92f62055a", "value": "T1A8836C49E653D0F2EC0209710567F7369A75DE3511A0DA2FD788FA7AFC32692D20A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010907, "uuid": "4a7e127d-ac6a-4305-abc4-3c7888f317f1", "value": "1536:0hrB0gvTN5ThKF3xdgD1lieO5LU7DVQhCAGkYUm31k9L26Cpfr2:0hrBdTNhi30Xil5LU7DVQYO9epT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737010907, "uuid": "3d83520b-23b7-469d-8142-dd1dd9cbb41a", "value": 86928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010907, "uuid": "8a058bae-9b30-4304-972b-056d34f01a28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e464b015-d3d7-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737010967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010967, "uuid": "a8420bfb-1909-403c-a3a0-069837d963a8", "comment": "Malware payload", "value": "35f795e80b48a6f993698ce6dbe21189", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010967, "uuid": "fbb4d7c0-a221-40d4-90d0-9f6f2e3a139f", "comment": "Malware payload", "value": "aedaa980aff6f3555393b119285597ab61926407f04dee7742e71bfa08e50429", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010967, "uuid": "ea65c14a-b987-41f7-88fd-51146cb7a963", "value": "T12293E64AFD809B11D5D522BAFE1E528E332317B8E3EA7102DD141F256BCA91B0F7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010967, "uuid": "03231d58-2d8a-46ba-ada2-95646f938729", "value": "1536:JNnkPM0OuqM9sCS4XZ/krVGTns1iFt31u5XmmXJCG2XArqWjalxPiuRfDo04ASn:wPM0Ou7sCtZ/kr0Ts1irluYmXJCG2XAr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737010967, "uuid": "86050d8a-4971-4274-846b-d7945de0291f", "value": 96472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010967, "uuid": "200897c3-c25b-4611-bf5e-356d3c9dcd4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90030ef8-d3d2-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737011461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011461, "uuid": "040160d1-5fe1-4bad-a7ea-21fcbfd32c26", "comment": "Malware payload (Mirai)", "value": "ce6c12ad3de799d4db2f50f4abdae859", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011461, "uuid": "390280e9-1e7d-47ae-a051-e32b5a9b5150", "comment": "Malware payload (Mirai)", "value": "3746b31f0e843bd1f196b080e6dd97fc59ad29aadcf2757b659a394f38a2bd51", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011461, "uuid": "cbc7af9d-cd14-405f-8b70-56ac6170313b", "value": "T12A834A0177180B47E1A35AB42E3F17E487BEE9A021F4FA84260FEA464171E77158EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011461, "uuid": "fa8caa60-369b-4aaf-9139-bf8d029491db", "value": "1536:siw3j2dyEWril8wndq5zO8liywoEvqimNUIomNhFK60l61d688Sl:Iz2dyZi6zFidp2UIXNq4v8Sl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011461, "uuid": "42743ab5-8d51-44fa-b009-c39e94080320", "value": 82340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011461, "uuid": "f23dc522-0ce9-499b-b0a3-f46949481eaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57c6eef5-1cba-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1737011467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011467, "uuid": "98f7a7a5-be99-4c15-b4ed-e9a49a9650c8", "comment": "Malware payload (Smoke Loader)", "value": "5fea6e7ebea4108ca440331ecea20f97", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011467, "uuid": "9e44094e-bd9f-4144-9ce5-2e33cbf6fd74", "comment": "Malware payload (Smoke Loader)", "value": "70698e62c2170d003b444ecf0c5f6af81f98e26a56198e118930566be818fe52", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011467, "uuid": "80ee94c6-76d9-4de1-9c65-403e74432abc", "value": "T10E33E13956FDE89E8E648B35780EE1600C7D66EB44605C711857B0F78EF81E1D198F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011467, "uuid": "240f28ec-b967-4d79-8fad-c5c82756eeea", "value": "768:1ARuSsEkZusAcgvY7maSBT89SD0M0V7Spp5+pQGaG3v8vevydjaOHPGAstn:CYPZu/vYKi+0V2pmaGmeeuOvmn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011467, "uuid": "e69fc603-3e0f-42e2-93d3-5a5aa9008e10", "value": 50520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011467, "uuid": "592fe366-1659-468c-85aa-a0f514597ac8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65f34dd3-825a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737011468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "c5711262-9bd0-44f4-ad4e-5288282d40ab", "comment": "Malware payload", "value": "9bb1cbab607d6bc9edbe8e5d75d59ae0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "5140fce9-ce7d-450d-b788-e540ba8a7143", "comment": "Malware payload", "value": "73dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "81ede104-dcf9-4a59-8b2e-09b085415623", "value": "T1A6D183F3548A6C9F963A0DA4E50863554DAC5E0B96EC807B6F889BB508EE0144CEA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "6e3682f0-20fa-4323-84ad-ff455e813812", "value": "96:YniHRdPqB/d64r05DhjDEP1098Xh3eDnERRB+6vaiFwmgNAr/M4:YiOJd6T+3Xh3uEHCQM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011468, "uuid": "65126cc8-7bba-4385-915e-279d20acbe83", "value": 6176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "47eafc00-5f84-4efa-a354-6f1a27b16247", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eeec28d-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1737011468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "fe60d599-f362-41d7-b375-01bfc6a93175", "comment": "Malware payload (AsyncRAT)", "value": "106e17809f6d7f984e2619b124fd2fb6", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "7d9b00f2-b75d-45de-8342-466d05183513", "comment": "Malware payload (AsyncRAT)", "value": "bd7d33723603cc9383bb2fe7292ce0ef3c34e2bc9c8f2d2d041e5ca4a18cef04", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "26c5dbb9-e545-4983-8c07-5c9478a56f34", "value": "T1E8233BF10763ACCF8B270F41E80C1212DC69EC9B32A984AEBF4549EA4EF55189D74C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "d44b7bb1-645b-41e4-86f6-7afc08685694", "value": "768:YhaLYrxu5lc7CCl+CdRdleEWCeDIOC2sBk17yyfAuHZcfp0qJPWzjoJb+V7:YhaLYN3HMoDoCeVC2sBYAuHMp0KP+joe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011468, "uuid": "a9af5447-75c1-4a60-8bba-f403a3af81b6", "value": 49152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "dafad98b-ba04-432a-98af-958be3f30ac7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb276fcc-d399-11ef-856f-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1737011468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "2707f7cb-59b2-4b98-bfe3-1a7860741008", "comment": "Malware payload (LummaStealer)", "value": "68906a14d8dd9f9963d90eaa444543db", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "97bd660e-2c15-4b0a-858e-b9248b3431bf", "comment": "Malware payload (LummaStealer)", "value": "371a50bb0db16e949acb4c3af87392a95fb7ecf9fb132043ee481016955a921b", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "10cf4f5d-9aaa-4e2e-be0b-577af46b5549", "value": "T173948C7B7908A8B80EBF141669191B494C2D3847C774C4E5FBCEE5B9C337C64863AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "526008f8-084f-4cf6-a3e6-18e74d1d7e70", "value": "6144:DHxn5VObnY8IWYex5sWpGo3zQ3mFjxc7QTALrjp4IWFiAkSFAF8G6o4yP29n:15VObYsSWpGl2IYU14BFiAkSFAFzM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011468, "uuid": "9b88f116-8ca7-4c6e-9157-ee29481f2ba5", "value": 429676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011468, "uuid": "c18b4718-a641-4d71-9cf2-d23b069ef94e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb8ff341-d399-11ef-856f-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1737011469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011469, "uuid": "b677198d-257d-4b05-818d-fff6e9f7d95c", "comment": "Malware payload (RemcosRAT)", "value": "9809319af139ded11fba6feceffb228b", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011469, "uuid": "9ca14006-a19d-4b93-897d-f2b5e200ee1b", "comment": "Malware payload (RemcosRAT)", "value": "ea2e5f31dec96d559398ef022940c65b7dbf898b88f872c9a695d467d574b77f", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011469, "uuid": "18422b12-835c-487f-8285-d840297eca75", "value": "T1EEE49EB57D44AE9B0EEF0D65A4180B0A4C3C54DBE36491B43AC2F4E762670D48ABCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011469, "uuid": "a0e8656f-f6e7-4f0b-a313-d9faa129f140", "value": "12288:Dip19RbW/R50xCahup7F7MlpKitZUk9oaOiapky:0pi/R501QRopKitZUk9oavaGy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011469, "uuid": "64dae8c7-2f87-48aa-bd5f-88b9adab82b1", "value": 698088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011469, "uuid": "bd94de57-f92a-4c8b-a83a-77eaca676faf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff57e85-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1737011470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "c6c6c35f-0973-4ef0-8ad1-a72b4f9d89e5", "comment": "Malware payload (RemcosRAT)", "value": "0b161d6ebe0c618034b4523450b55547", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "659b9bf9-f699-4a24-a653-7f6cac2c3a13", "comment": "Malware payload (RemcosRAT)", "value": "a027307a352faf9e32ef39ba27452f152a9b2d726d27241c020c80660bca47e3", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011470, "uuid": "d7ad47b8-d7b3-41d5-a677-1d3d97542f63", "value": "T135E4BFB58255EC9F0E1C0E61F9080B4A5C6C48D7E6B8D2F87E82B4F986560A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011470, "uuid": "086424ea-8f1d-4999-ba26-80e9df93a216", "value": "12288:NJKEbS/VVPZnS9+PGjDDaCK4HV65ejI3QYEBl:qNNVPZnKD3JK4HV65ejIgYEl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011470, "uuid": "cd67be64-bc14-4356-88f1-555f27047b92", "value": 658092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011470, "uuid": "672472b9-72eb-4c08-8ee2-194cc6bad603", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a3b7764-d11e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737011470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "3b49a6f0-75ce-4378-be79-93a462b74857", "comment": "Malware payload", "value": "144432339772094bdf63f2e9ded0aa63", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "01f16268-6d7f-4d25-8370-a3529c45b524", "comment": "Malware payload", "value": "2957edfc9b8ae3ec34b8a6a9089df6f896f271bbf1399203c8025fd6cb0731fa", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011470, "uuid": "f3343e81-3d83-4e1b-a8b8-eaca8ae5ce96", "value": "T1D4032BB7AE55B89DCF3B18628D0537282C6D5C5B8732C1E4B9C0F806915B490CE79D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011470, "uuid": "d53b4d0e-7e7a-440c-9cba-78640b1d071d", "value": "768:zUJIKHlKyhTbSyY4ZhrQUIgTWH3mpkVijkkqE+bJR0PwE:AuByQyP/TraEkpQPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011470, "uuid": "f6cfd1e3-93a1-4a98-a065-214c92f75fa3", "value": 41368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011470, "uuid": "d4d3f5d6-7f1b-448f-b91a-35a7293bfef5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eafb0534-d399-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737011471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011471, "uuid": "1271f953-4347-484f-8341-bdb7cff97fcc", "comment": "Malware payload", "value": "c3fbdc5bba3b5d2bc0b71a534bcc5a83", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011471, "uuid": "900004ca-6838-41c1-a11c-8d01c416f57d", "comment": "Malware payload", "value": "87b8a1fabde34850fca22a1750c6b07d6f37b5459bc550949ffaad053c75e773", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011471, "uuid": "3f154a28-1f84-48d1-a8ca-f545f337e82f", "value": "T1A8B47D3DE5DC93F44E2FB433355CAF8EACA25ECB9B204184B7F6A4B4554309861398", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011471, "uuid": "e0a30191-b65b-49e4-aa72-472d15062441", "value": "12288:bBP9CynZt+XCuzG4v5kwI0kDxWrJHL7bqeKEd/0:fC104vnI6rHTKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011471, "uuid": "d9f5260b-d830-4807-a211-9e375ee66a18", "value": 518252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011471, "uuid": "e630f60b-af56-42b1-b839-4aaf157d336e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebebdd00-d399-11ef-856f-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1737011472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011472, "uuid": "c7ccb76e-1945-44d7-add9-b194897150a6", "comment": "Malware payload (LummaStealer)", "value": "6a1a093b32f43838ba87ea465f8ea284", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011472, "uuid": "2f235940-8831-4824-b8c1-9bcf17ed6536", "comment": "Malware payload (LummaStealer)", "value": "ccb4acd548218089b4ba2ee01ef0acc4ec53473c28d7677594561f27f8e3f95d", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011472, "uuid": "bb85f4ca-2755-48e7-aa54-13eb70faacb2", "value": "T136947C7F3908ADB44DBF286569091B085C293843DB30C5D4FBDEA5B9C33BC54863B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011472, "uuid": "3178ba37-63e5-456b-8322-2f1f08f81b5f", "value": "12288:c3xTkWcd1oHrI9L5yqXxCjWrrbDTc5zZLS:F/1srmQIYaHTcTS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737011472, "uuid": "f5a829f5-c33e-4784-996d-abcb14103899", "value": 434928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011472, "uuid": "7532f0d1-5219-44ae-99d2-95f91ef432dd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14fdd922-d3db-11ef-856f-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737012337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012337, "uuid": "e8a11a2c-ba94-4176-8d72-2959dd2ca8e6", "comment": "Malware payload (Blackmoon)", "value": "9ad42d1ce14eadbc2aa90d379eb3fd38", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012337, "uuid": "2373f6a6-1794-4d1b-bd30-3496c8bdee57", "comment": "Malware payload (Blackmoon)", "value": "b1d8c7b178f84e6cd0801cd873f6ef91df966fbe0d029a094bae5bb947011634", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012337, "uuid": "5366d82f-8ad9-4e37-aed4-aadd6ae788a4", "value": "T144E423890C96FA79D70E86BC342F6F3FA8B34218C4AA15EE1BCD5741EC6DA485C552", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012337, "uuid": "c0eb6417-5020-4e0c-9bb3-af01319f3219", "value": "b24f60178a02b1ca585e0f029e71eba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012337, "uuid": "a8409462-a50f-4c6b-8473-0feba010807e", "value": "12288:digknNe0RM1BhyQYWoxLdTkjAs58fJ1bX+6HuYioS:dseEMThyQYW0ZqqfPvHu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737012337, "uuid": "6cc2fe6d-c33b-4c50-b867-dc06acfc95cc", "value": 703488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012337, "uuid": "f0e93112-0281-4be2-ba37-96ffa7671b2c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f076463-d3db-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737012354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012354, "uuid": "84d380d1-3b65-48de-a4f4-1484ab9e7796", "comment": "Malware payload", "value": "890896e2443931fe7876d5c3e9cab702", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012354, "uuid": "ea84939d-6378-4d0e-ac4e-701e903c3ea5", "comment": "Malware payload", "value": "0f51548335471e3d9d9b49cda7294805b76fd7b27b3fd2bd32632b49f0585184", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012354, "uuid": "8bd162ed-594e-4513-994d-9ddaf2c9587c", "value": "T1053533F2AA2D79C9F9C359FC71DB70184E0E1FCB0E146ACA41D34A65894DB24F638A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012354, "uuid": "6613f0ab-f6b6-4f6a-a504-7c80d4ee6148", "value": "24576:6hucc9ejpdsI8TCdlbk2PjcE58RAZTZQ3SlfWnSgHTUwlHpAo:wuMsIxbkKjcERZ1xlTaT9qo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737012354, "uuid": "e9e0e1be-f85b-43cf-9672-e7aa55a54af2", "value": 1159159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012354, "uuid": "1d44a3e9-5bb1-48b6-97dd-fb1e23224abe", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d36b2de-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737012888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012888, "uuid": "48f2ec44-b651-4189-98c8-cfcf746705f6", "comment": "Malware payload", "value": "15e9462c9b9c46814062049c9ea88961", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012888, "uuid": "dcd3d78f-7767-48da-96e3-89d1d6470adc", "comment": "Malware payload", "value": "6263f1f53521c4d6e17797426bd842ad08134c9016df6b10d0bc6417b7fff5a1", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012888, "uuid": "c005244f-513c-4e52-ad8d-babc594e7b04", "value": "T1A27412F3D8E8AE80DD151AF406E634D11C8DBFDF2D9E043B9A7F2E65A48822174F46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012888, "uuid": "575ee2bb-2cc6-4ddf-ad1f-9e5897cfbcaa", "value": "6144:TEQci3KWCP/C6hlS1+JbEDgn/LyPXw6hFSL3e1J8lE6+ft4:TEQz4oqsKrg74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737012888, "uuid": "ec05dc00-e721-4619-ae4b-db7e4ddf9bf1", "value": 363458, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012888, "uuid": "dd4005a2-c8de-4ac3-b60b-052b808cb4d7", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8da53bc1-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737012969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012969, "uuid": "f6903083-a8a2-4595-996e-b0868febc8b6", "comment": "Malware payload", "value": "c8d5442b01dfb6dc0b7fbaa9f0e363a6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012969, "uuid": "4b95bcdd-f5c6-4836-ae8e-cb6921807c7a", "comment": "Malware payload", "value": "2aa83a78128b7bdf2ad230d6cd5dd3e44c8a5220685d435bd5aac1f105a8df0b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012969, "uuid": "4aab8144-153e-466c-a181-0c7d500a1bdb", "value": "T10AF423954EB22F723F204A4F75AA9F993E5288BD012EC3F99395ABD044C0B54D0DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012969, "uuid": "8ee7fa24-c755-4c43-af63-42b213cbf3b4", "value": "12288:/PiVCb7LA64iFOn+xvOoi6B4/x089pIJslKeONMit6Itaep5dnuG2utBDjnMpXYr:/P2yLA64oOnSvOo3B4p0cpIGlKRMiD4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737012969, "uuid": "a65e847a-6064-43aa-bd9c-49f97c821129", "value": 764756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012969, "uuid": "b0fcc809-b40a-4edc-83bf-0632baf36501", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e855e371-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737013121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013121, "uuid": "d5c2b395-8b41-4600-bfe5-41007dcb0a96", "comment": "Malware payload (Mirai)", "value": "4d8f5513a58548be86b563a9a10da015", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013121, "uuid": "9806f7ff-7728-412c-bcfd-3757bac739a9", "comment": "Malware payload (Mirai)", "value": "aa3fffb4699ed7b10d7cd58f26246154730229c52491e0655e4b019f0529d92a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013121, "uuid": "d82bcf4f-8574-49e9-9f4a-89fb2d60e689", "value": "T13143BF31AF8C22F4D59831BC22251DE86B61B367499FCA975C6AF9301FB73494A05F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013121, "uuid": "bcca5fa2-37b3-4c41-8352-2cfd388ed35b", "value": "1536:9RMVmAT0Cz5znhwiLeph2B4eylrI0Wq7izFRkxPM7Aon:PW3WXpMBolTGEon", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013121, "uuid": "9b72a874-45d7-4df3-913a-43a71020b616", "value": 58824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013121, "uuid": "07840503-28fb-41a3-9ea1-50b85634aaa4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbfe5063-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737013154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013154, "uuid": "e41772d8-dcc7-4559-9a10-0978d175317d", "comment": "Malware payload", "value": "3fd00ab420494477c03c8d40205c16ce", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013154, "uuid": "df001133-e7cd-4b2c-ab7a-d52bc6622975", "comment": "Malware payload", "value": "33e836096cc526313f4a727543dda9313d9cd7231b63ae9a2c525a5fc2ecb26d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013154, "uuid": "8fba7968-1ae0-4cfd-900b-6b1b339036da", "value": "T10C920906A95A535BF976187053A32E35607ABE32631D85CFFF80093912B0DD4FA373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013154, "uuid": "fdda60e5-3ba1-43a2-bf39-ae5ecf57bcc0", "value": "ea87040ee3759f3d17459a3dfccfd8be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013154, "uuid": "be2ab0d9-7f6b-4fc3-8531-8cc651422b7e", "value": "384:PQd0WLc01P5vdVhz8DUkf/ibYTJ4JVB0TBMSTR:25P5xzUUTYAIB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013154, "uuid": "1eaeda21-6208-42bd-a99b-3484026f4c02", "value": 20992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013154, "uuid": "0ce53a8c-a228-4fae-b623-caca94eba817", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66b92e50-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737013333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013333, "uuid": "fa913d13-e6e8-4181-bd54-7b759f4e58fa", "comment": "Malware payload", "value": "539fdba8758dd9332bff5f0aa33542be", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013333, "uuid": "f9f74a12-8b4b-4da6-8af7-3b02399a63c4", "comment": "Malware payload", "value": "dec8dad6d3a983761629293c25df8618b373192da977867b79d4b620f5f88d24", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013333, "uuid": "95c64c0e-7b86-46ba-8541-90000ee38114", "value": "T10934DF40072A07FD4AD323D823AB7E8939D7DA9DEDC995B77C582C48EC0500466ABF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013333, "uuid": "47daf3cc-e992-4719-8312-35ecdf25ffdf", "value": "6144:IsBe7wwKhtgZ+zfRNB51USrQ7Vh0qU9CMyaU:ILlKhGY/B517sP0qE3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013333, "uuid": "a14f4b1c-eec6-46f0-a8e9-3347a4b24e07", "value": 239702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013333, "uuid": "1b8fa154-e1b3-43b2-b218-ef54c1cffd33", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8221062f-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737013379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013379, "uuid": "c7c2a80d-8aff-4fd7-86f4-a916caf51fa9", "comment": "Malware payload (Mirai)", "value": "e52b2a68ef1760859c2dae96376392f6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013379, "uuid": "bc47905d-a009-445c-914f-3669a8ce88e7", "comment": "Malware payload (Mirai)", "value": "ccd8c82b64c4a1ca45b5e1e887547dbad917e00c891c841a5c293ad410309345", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013379, "uuid": "4754fc48-c729-4e1b-afdb-c8f8e9ef5eb3", "value": "T123931989EA83D1F5ED074D30545BF13F8B309A21D424DEAAEF89EE54ED33A1260097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013379, "uuid": "5861a76b-d132-4d9a-ad88-5c326cafb580", "value": "1536:XpOelWDj8L4SkXXlcSbboT2vfoKeKqcACve5YUT31k91+tBdCNsr:X3Wf8sSkXVcSbGKfoKVqcoO90CNE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013379, "uuid": "2536dd4f-8ec2-421a-8874-73a9c26b3e56", "value": 91024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013379, "uuid": "4befd80b-2b85-4877-b604-1c8a293cb1ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a97485c4-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1737013445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013445, "uuid": "5b59f690-4e5b-4f23-89fc-3f946a1f8f44", "comment": "Malware payload (Smoke Loader)", "value": "c7ff108ad414ef78f5fc1215a0da1e0b", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013445, "uuid": "8d309a6d-c910-46ef-8ee8-dc3b70084725", "comment": "Malware payload (Smoke Loader)", "value": "9a87ffb9d32d5074aa01745cd47f79a6f80bd445a0e1d40cb11b4a99cca5dd13", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013445, "uuid": "5f1c43c2-54f5-4fb7-b18e-b96e12acca31", "value": "T1E423D17B9443E08BA417CBBFFDEC2D6416415C77ADF86F4921F8901B7AFC18621249", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013445, "uuid": "4a802ac8-2a3c-4b38-8359-52769d3d8e86", "value": "384:MmAzBJADbB4sbZUdA00AmvjDmlB9zAPu7lvRvw:bAdJAhttcAdAPhAmRZ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013445, "uuid": "e61dadee-6a74-491d-8e66-ef8c30882786", "value": 48275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013445, "uuid": "4e255fee-f091-4285-9345-f49e0d864798", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa0d2215-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1737013446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013446, "uuid": "4ac68623-5944-48f3-bf28-4ab9fc618ae2", "comment": "Malware payload (Cobalt Strike)", "value": "9f2637a15688e9099c502c6ffbe0acc5", "object_relation": "md5", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013446, "uuid": "9772be6f-c7d5-4670-8b1e-889408e35d0a", "comment": "Malware payload (Cobalt Strike)", "value": "2adf9dcc9ddc2d10cec9a26a52233e77f075426413fe2ecf914aba67eea58bdf", "object_relation": "sha256", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013446, "uuid": "7c984231-cc00-4963-8040-a79382ebaece", "value": "T1C9C45B0BE3D745FDD60BC3B549D767B19C72B8220938B96F0324C7B92E11D909B29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013446, "uuid": "ae9c6f3d-6637-464c-ae71-85a320c9002c", "value": "e4b40ab6ac5308d4cbd835973d06cd63", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013446, "uuid": "ad565ed0-087c-4695-971a-6db565576a92", "value": "768:KyqzpG/6kR8uKFNmzrGp6zATK1EhreIRVmwXghtW240qqAg:686kGuKqHGp6MTKmhreIR+tN7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013446, "uuid": "54f9cadf-39ab-4eb4-8fb9-30e85880955b", "value": 553472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013446, "uuid": "7a5ddf9b-e0ff-435d-ab4b-37e29926d1d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3edb7764-bb82-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737013509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013509, "uuid": "832b3a5f-ece9-4441-a4c0-ea07dc6498b9", "comment": "Malware payload", "value": "5ee5b72fa506748b32c6e83549a667f2", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013509, "uuid": "46e26208-645a-416f-8df3-dd04e215c6e6", "comment": "Malware payload", "value": "f8fc21e924bc7fe64926cbc2e8dfa3042c3957cc2dad06c41e3e757f438a96fa", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013509, "uuid": "5896392b-2e94-472d-9fe7-79c730a510fe", "value": "T13953D065E2A681D1EAF29054FC94A95EFDF1318F51149ADFA3190E802F23930FB087", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013509, "uuid": "6a6363b7-1b14-444e-a279-f6de7a9b396b", "value": "1536:AbglINaJuRwvtKbzABrBEJrSIDY7cS7i9u6yeNejY6yFOB:GwIsJnMbmBEJdDycS7DZW6yFOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013509, "uuid": "151317aa-c408-4ce4-b886-2b913edfea87", "value": 64469, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013509, "uuid": "7c7ee2a4-d215-44fe-81c2-61a8b7608698", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0016ec4-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1737013510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013510, "uuid": "c6e0d537-ab0f-4540-9c71-3df23a2fd99b", "comment": "Malware payload (QuasarRAT)", "value": "4e7b96fe3160ff171e8e334c66c3205c", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013510, "uuid": "98ced269-4643-4d57-82c9-2ccf6b27453c", "comment": "Malware payload (QuasarRAT)", "value": "e698a786c4dcd964e54903a98bfaa0638ce8f52e02658f1223805c6e3b1ca83c", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "a4ae4cff-2ea8-4c17-ae16-0bb963942ee4", "value": "T121B49D137794D87FD0BD0736F473822917B8D897BA22E35B6A18A7B82C237454D427", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "f4c93a47-a294-4178-b2dc-07b57604cb9f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "08106ac0-8617-4e2c-bf00-e7b8f7cac178", "value": "6144:mMqQ4i1FFiEKS5huOMGOjBbqSJvoUdy6RIQ9+F2q7N5YrKywP:XpliiqGOj4S5oUdy6WPPYWywP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013510, "uuid": "7e1e2c50-71e6-4367-aa37-51e511f5414d", "value": 519168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "34b42d26-5b89-4103-a816-cc1bb4836aa6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67b77e84-d18b-11ef-856f-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1737013510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013510, "uuid": "d01d01ec-d933-4876-a0f5-13f943d51c2c", "comment": "Malware payload (QuasarRAT)", "value": "21ce4cd2ce246c86222b57b93cdc92bd", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013510, "uuid": "548fdd95-30e9-4fc0-9ce0-e53d97209680", "comment": "Malware payload (QuasarRAT)", "value": "273c917fc8fddcb94de25686720df1ea12f948dfbebffa56314b6565123ae678", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "5830a33f-ec5a-42bc-aacd-90377757725d", "value": "T195E54A1437F85E23E1BBE273D5B0041267F1EC2AB3A3FB5B6181677A1C53B505841A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "37ce3ba9-ac62-43ff-8842-d6d623489bd9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "2afd3a0d-8704-4f96-9bc7-00afb21e6f2f", "value": "49152:DvTI22SsaNYfdPBldt698dBcjHZqS71J/ioGdRTTHHB72eh2NT:Dvs22SsaNYfdPBldt6+dBcjHZqSOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013510, "uuid": "d624e5a4-1bb2-4a71-9787-0e8dd2b70173", "value": 3266048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013510, "uuid": "404a9738-d021-4ee6-b9e0-c31b341aada1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97b28bf7-d3de-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737013845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013845, "uuid": "c81b60f1-a0f4-471f-ac8b-142958540c66", "comment": "Malware payload", "value": "1105ff1039c97e1e5cf8d0c35d8a2c86", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013845, "uuid": "cc03de0e-8e15-4a98-9ca3-5dbc287c5742", "comment": "Malware payload", "value": "fee872e0019d8bbf44ce21d40513bc8a96040b140c72673d864f106f777dd4d0", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013845, "uuid": "f2a564b0-8b31-4f5f-bb37-37841bc19b28", "value": "T1C906CF8A7720472DFCBB14FD6E9E9223D62B6E409D02C2C7B948378E14775952F4A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013845, "uuid": "320739c8-1e0f-4e51-942f-bd73123d8129", "value": "98304:T1y8VlJ8d7H8/jRRb4A1RtZLrqOfLDcjz0:Jy8V38JH8PbptZL3zDc/0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737013845, "uuid": "7cad3834-2c95-4abb-bbae-9816ff77463c", "value": 3660300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013845, "uuid": "fcbd154c-242f-4687-be4e-492d98a3cb0c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9ca045e-d3de-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737014009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014009, "uuid": "6df55255-c573-4dc6-8714-f986eab3b224", "comment": "Malware payload", "value": "b6365d2478848e26f064119f117b7611", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014009, "uuid": "3c65e29d-349c-4d48-aeb7-5a53db02d477", "comment": "Malware payload", "value": "b608a033b7f8716073509b25f4c1225699c3fd5f95aad377be93b3b17f271dc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014009, "uuid": "ff8aec49-38a5-44b7-acd2-91620125bee8", "value": "T1F8831946BD80DA12C5D562BBBB1E52CE372753A8E2E93107DC146F6137CB92B4E3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014009, "uuid": "25cf6191-8c89-4859-9c3c-db49a7dcabd4", "value": "1536:y/BOgLWOcKpV7ZO+xB9/ixnUO4d1YRds+bc9waxZsMrcFVpGE5ZTXAKn8M:ygIWOcKpV7Zpj969UdjYE+bc9fbToFVP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737014009, "uuid": "91de364e-118c-4a7e-9a98-f97d24242c7a", "value": 83124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014009, "uuid": "ab3d524f-ba0e-4bdd-81b4-dd534e877a93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17c90da5-d3e0-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737014489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014489, "uuid": "1a0bbf91-4440-42d5-bf96-d8e3770a0dde", "comment": "Malware payload (Xorbot)", "value": "ce15099cc04b402c6136ceb01713d06a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014489, "uuid": "83b5277d-88be-4d54-9f92-3b100cff5447", "comment": "Malware payload (Xorbot)", "value": "9aa848a827bcf147e459e08b280f823c015d7f7a61725d89c2a19cff5fce5445", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014489, "uuid": "5c6c191c-6186-41b6-bef0-58078e711764", "value": "T10C2253CD06D02B3328649D1C6D99E838948784E1EBCF7EC8D8970C9D9989F5ABF15E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014489, "uuid": "c92c9e2f-4627-46f5-992a-32b1e1bdc6c8", "value": "96:mvyq2Xj2LOAs8aTOGG33f+eEkKbaTOGG334iSVInNeMyq2XjAXO2h:mnLNs8yLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737014489, "uuid": "d91c2dd2-c021-40ad-b1e0-d60d91e55731", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014489, "uuid": "71febea6-d95d-46f5-b71b-b4c64671a20f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94ac78d1-d3e1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737015128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015128, "uuid": "35942c60-410c-4bc0-9a4a-f1d20d8b3567", "comment": "Malware payload", "value": "33c540518350801ba5203037058c27b7", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015128, "uuid": "5ffc0a5e-9620-4a63-9103-68de13f6577a", "comment": "Malware payload", "value": "2d4ab87f9ea104075d372f4c211b1fb89adec60208d370b8fb2d748e1a73186c", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015128, "uuid": "72a5973d-2bc0-48af-b0cf-776e5e665fd9", "value": "T1AFD54C319146FEFF8F360C49F51122608CA878976B6C85A9BF8562B650D7198CCEED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015128, "uuid": "9e7637ee-e2aa-453e-81ae-a6b367b2ec97", "value": "49152:uZHfhglN2n3ZBpJdncMCjY42HeUku8IKeuHABgGYFbKOAlB:OhgC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737015128, "uuid": "1e7a110c-c1b1-412f-a0ca-53c40d96cb15", "value": 2759301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015128, "uuid": "beb1c07a-23ed-40e9-ae45-bee282d3081c", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "276fc3e7-d3e2-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737015374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015374, "uuid": "2640097c-d1f3-4bb1-8131-66213de867d8", "comment": "Malware payload", "value": "09f6c38e1536c3f86e7adab54e6fa966", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015374, "uuid": "df8f19a1-8ad7-4ac8-94cd-dd08f654cbc3", "comment": "Malware payload", "value": "6046ef4bf4c6ba1a4ea7fd69ab27721e500fa1ae0c086918655273a68d12bdb4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015374, "uuid": "1b9b6889-fa42-425d-bd3d-916c1b41bf6b", "value": "T108E56C03E142C171E61256B011B2533A5AB86F752936CA43FBE9FEB57CB21E3D7261", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015374, "uuid": "403bb11a-5715-49af-b4c7-a406ad45f516", "value": "eef76cf2087230a5c13f900c0c3308c2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015374, "uuid": "8594bb47-5527-43ba-b6b6-5f047eb5ca85", "value": "24576:XxG+v/O62ygogVAccBElRpB8P+funYPYDneIhl3OtBL3DYrVRza6jSHWYwXIaEZh:XxQ6cBdbFYBot+rV/SHWhW6xPpvY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737015374, "uuid": "d65df4a6-529f-494c-af17-5d082062f5cc", "value": 3106304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015374, "uuid": "b08b6c4a-cd0e-40d9-811a-a7ce18d4cba9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737015546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015546, "uuid": "edde6c31-768d-4f8b-b9a7-a909e38460da", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015546, "uuid": "8af7771e-183e-49d6-a3e4-c3730ada112b", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015546, "uuid": "12031c82-672f-471c-a6f2-512ebf0962d8", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015546, "uuid": "a9da1863-b0ee-4b8d-8cbe-fabf90229761", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737015546, "uuid": "7ce8c752-6710-4b78-a704-20b6f50be920", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf47c77c-d3e2-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737015656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015656, "uuid": "c70863d2-9b37-4037-b38c-93937a7048e0", "comment": "Malware payload (Mirai)", "value": "f2a27433e9ff85bcaccb2868fa3da117", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015656, "uuid": "df57058b-4261-4012-bdf1-5813286ed8fb", "comment": "Malware payload (Mirai)", "value": "0672bb85f33ea09df92cbeb016dbbe15e5672f8d2b6764cfac38f4e8ec74a3ea", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015656, "uuid": "665d4001-4e9b-4267-9c0c-74d501a208f2", "value": "T11CF01CDA22442A308FD0C81E7403CD1C688CF99C129093EC3CA82B2080DC890FE22E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015656, "uuid": "ae442723-5807-4959-b63e-ba102b0cd6ea", "value": "6:fRXIWRaJ++jRXfIhWRaJ++jRXyRaJ++jRXubWRaJ++jRX5zhWRaJ+E:fpIwaVIIIwaMIwasqIwa1WIwE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737015656, "uuid": "fad829a0-e5f0-4be8-a2fa-bb102795e826", "value": 474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015656, "uuid": "ada93c8c-f902-494d-9142-53e213547d1a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e492b34-d3e5-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737016782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016782, "uuid": "2a2ed555-6b49-4eba-ae0f-8b970ba0d568", "comment": "Malware payload (Xorbot)", "value": "32aee714a524ad45a037a1cbdab96214", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016782, "uuid": "7452ee3d-415c-446c-8d17-66eca2a6b645", "comment": "Malware payload (Xorbot)", "value": "02d9c5f583cf00a5acc650a41918f5f3cb13f52e89e6a782938041d432c7fe73", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737016782, "uuid": "ac205bc4-d1f5-4c0c-bb58-8518a7e4a337", "value": "T1C822DACD255402221CB0DE1A799D4CE85809AC916CCC8E5DD8D6189DC94EFBF39C6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737016782, "uuid": "aaf95879-8d9e-42bb-bcec-669c9e5421fc", "value": "96:YKCeAbhbZb2Xj2LvDUL7XZAL40xeO1ddlL/TryKULxT3xPxG33mHbtsttE+uOULj:dU0WlceYh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737016782, "uuid": "7792948e-8b19-4c3a-b75b-7681bacf9664", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737016782, "uuid": "25287c09-87fb-49c1-bb88-9643afbff73a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "863123b6-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737018110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018110, "uuid": "cb78ba1a-3fff-4f71-bc7f-3823ef4919d2", "comment": "Malware payload", "value": "82c16ac2784a34c59514162ae7e26ac9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018110, "uuid": "b4e7471e-7382-4066-a116-abe558595cf9", "comment": "Malware payload", "value": "aee72df7a7faf034183bb37a3aa5dd622eb58212c9bc502c28655b481ac521d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018110, "uuid": "7581bc87-ecef-4963-b4b0-deb8b9e94bc3", "value": "T182839E31E5542CD1D81102B4B0B5DDB94B13AEF4419A2D727EFEE9680493B9CBACE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018110, "uuid": "66ce5de7-83e7-4cab-bed7-4c516a37ea5c", "value": "1536:wkk2BKBauB67ZZb8LfXS0/KInhhlHGgxlgyrqA+nzr6:wBWbuB67ZZYLfXOY5GyZ+n3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737018110, "uuid": "92c4d0a5-f008-420a-a382-1af71ab96d15", "value": 87008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018110, "uuid": "b9ee2cde-ff39-49f4-8d1c-dc6150129ab0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e62a722c-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737018271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018271, "uuid": "a17a8d7a-f45a-4033-ad23-885dd90514c4", "comment": "Malware payload", "value": "4eea18d64fe01ecf061f1fb3320116d2", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018271, "uuid": "e25bbaab-4c47-4afc-9fd7-da4130917f9e", "comment": "Malware payload", "value": "81a37ac5d9d0820479f157f6a75ecdf17a04da499e1e9f3ac57d4fadaddb082e", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018271, "uuid": "1f867dba-3c56-46be-84b6-c4c646d1b7b7", "value": "T15F36D04BE3866659C8F2473A4D7E4EA515B74CA14F839B83A834732D597B6D00E0EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018271, "uuid": "3db98dc7-17f9-4ab8-96cf-b89d582a5761", "value": "98304:53mUMdkaoLKauoPqN0gPU1eeXkKZ/LPHFyB/64Z9AVcx:53mUEpauoPqSgPU1eU9LPHOiSlx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737018271, "uuid": "1ff20b26-61a4-46c1-9abc-20be1485a4b0", "value": 4919993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018271, "uuid": "0d47f51f-1e52-41d5-bbe4-516cda82e08f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfadec8f-d3e9-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737018636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018636, "uuid": "1d70836d-12c6-4799-b8e0-40e13134e6a8", "comment": "Malware payload", "value": "b5d9174e93c3c964fca9e1941f46ba0a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018636, "uuid": "37df40e4-94ec-4a7f-a896-d16768d88cab", "comment": "Malware payload", "value": "c5eeec72b5e6d0e84ff91dfdcbefbbbf441878780f887febb0caf3cbe882ec72", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018636, "uuid": "68af7eac-1374-44ef-a24c-3b71cbf8aae2", "value": "T14D61BD250244645E4D32E37E886E528EEAEF104F13746210BE8DD8EE5F71424C7BFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018636, "uuid": "28a3fe07-7b30-451a-bd62-6737fdde3731", "value": "96:dCYyfPMdZ+gFXyqp/9ukJmdLZJtN+d+ToKta3:LtB9ukQdLZf2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737018636, "uuid": "c7585397-0014-4f03-b456-7b57c0b81c28", "value": 3393, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018636, "uuid": "f82583df-1887-41f5-9afc-b8f5700ed695", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c37fa120-d3e9-11ef-856f-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737018643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018643, "uuid": "7835a203-c739-4d41-88e1-246d86383bd3", "comment": "Malware payload (Healer)", "value": "5d7bd0ab3388436c21c1b3d31b2c32c7", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018643, "uuid": "a0fe5440-d443-4ff8-bac7-56effb4476e9", "comment": "Malware payload (Healer)", "value": "03d63216f99b80d38fc0f7cb779cdd7889aed15357fa8a884781c49c75ea7282", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018643, "uuid": "154f11b7-99b4-4f6e-a267-0f9a720c2f6e", "value": "T1448533C1116742AAE94DA3FDA6CFF70BADF04F665C6CE76E46400217ADC3E93A1980", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018643, "uuid": "f4ba0f9b-9724-4fe4-bd84-dd6c1d7071d5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018643, "uuid": "f4d65d4d-323a-491e-918c-7ef2ec4bf151", "value": "49152:XqN7GC5HjhJ9ycwwyeNUJFJ5YpcEyPctA6TCIr4JF:X8qCJhJe4GRESGOIcL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737018643, "uuid": "0bbea037-5589-4ae9-b1ab-b16f171bebb9", "value": 1769472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018643, "uuid": "af71ea52-b9d2-4752-8a9a-fbf177e54261", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22dae40f-d3ea-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737018803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018803, "uuid": "0e4f1a98-39ba-46f0-acb9-88d804c23d5d", "comment": "Malware payload (Adware.Generic)", "value": "75d02d8ed2274e9d74df9823c7b5d5f2", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018803, "uuid": "b1edbc3b-9d5a-4e59-906c-6afd032dc8e1", "comment": "Malware payload (Adware.Generic)", "value": "eda266ed1b3025ed38a0886c9d622d53abe68228da49476967e6c0c499f25bf8", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018803, "uuid": "2f98e255-5426-4b29-b380-105713097458", "value": "T133163393E7E580B0D51406F13872C95E5C3631A51D794212ECCDAB2CEFB95E2AC9AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018803, "uuid": "77e4c3cd-35c3-4ee1-89cf-2df9be099177", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018803, "uuid": "5177578f-acc4-43b0-b58a-d263b47a6029", "value": "49152:e9tUkvBsfmbL6tJWORjWzgT/XfJaFR9YhdXEX1LQGTwNJ9tm5uVIOtdaXUMWzwSK:47s+L6to528FY/XEX5+I3aD3EC/fG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737018803, "uuid": "a84147a1-7d88-4973-9a2d-55f6f924dc91", "value": 4069067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018803, "uuid": "d997c21d-022c-42f6-bfeb-7521e52dbf78", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33bcbeb5-d3eb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737019261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019261, "uuid": "047c6d3f-c683-4a40-88aa-419cec9bb3a0", "comment": "Malware payload", "value": "90165a51a1e280c280e37d469ec917c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019261, "uuid": "847a9376-c211-48b5-87b2-47985bcaaa37", "comment": "Malware payload", "value": "1168fa5e3c425be8fe9410da6a177e239c5303176ce7b5ac638a57cc0ca15a2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019261, "uuid": "87b2fb51-d426-48c1-b630-1f11b315de37", "value": "T159B3B61E2E618FACF7A9833087F75E21925933D626E1C584D2BCE9041F7035E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019261, "uuid": "d0bcab89-4702-4395-90e0-9830c8916b36", "value": "1536:BVwSJtwA7EnPzEn/AM2677hynPsBwHbN+WRBenSnLf5Q9XjeVOxm+p7QwoTkTxQj:B+Cwd7q/AM2677hGsBwhZ4HcJwS+nhC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737019261, "uuid": "b5aa0ec3-1e7f-42f3-a113-2285dfe7d0f9", "value": 114164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019261, "uuid": "ef674f9a-bf95-4b8b-b530-ea3c5453e4cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37afa541-d3eb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737019267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019267, "uuid": "9764a155-1106-4981-a58f-ac5c8474864a", "comment": "Malware payload", "value": "f6934df6b556454afa54a810cb2a56cf", "object_relation": "md5", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019267, "uuid": "40133275-c01d-4745-b6d2-f718465b6d9f", "comment": "Malware payload", "value": "5cac0c81e775f89557497a1a6219fcb878b2912f5c731b8d33de914f84e55220", "object_relation": "sha256", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019267, "uuid": "b22ed6eb-d726-4164-80e4-297d7d2cfc71", "value": "T1223401B1688FE4E53A2BB94FD504BA306D18647FE1199069329C5BD807322DFDE43E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019267, "uuid": "40792c46-ec19-4a5e-939e-1e13bd76345d", "value": "3072:A8gVmI3b0mgfmWu+ELe9VOv5iG5sVhQ30Wk+70wgA1A:A8gVHLe9VOvM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737019267, "uuid": "819d738c-81c8-49f4-9fd6-eefce57e1ff3", "value": 232209, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019267, "uuid": "891372e5-9ce4-489e-b51c-4ebd335572ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5478ea51-d3ec-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737019745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019745, "uuid": "081591f9-652f-439a-a4e5-1cf6b2788702", "comment": "Malware payload (Mirai)", "value": "075ef5645c242dc9f0ea9b26c7dc351b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019745, "uuid": "51e8b599-d7f3-4f1d-90d9-c6e3deb50cc2", "comment": "Malware payload (Mirai)", "value": "d96fbb534d5ff6570a5cd876a9595cd283017d34e562146339c60bec639d4d2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019745, "uuid": "bef997e0-0a51-4d26-abfb-61f8ce6a612c", "value": "T113049289BF903FBFD81ECD3342958A06129C891A5298BF7B6B74D404F69B10E59D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019745, "uuid": "5abd3aa2-a6ab-4593-a344-ceb134cbef60", "value": "1536:sYTg07n+NNTI4k72rE5uYHZIpRgN4N7oPEbD8SW9xZL5bDriOdcQWfLxw8EElC3R:sswTI4k0eqocYSGxxcQWVl+nHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737019745, "uuid": "026f938a-2fff-4cc2-81ae-2b33ac8123ee", "value": 175564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019745, "uuid": "8be770f4-a8e7-4c1b-b368-c69b1f04eab2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54c98dc2-d3ec-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737019746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019746, "uuid": "94ca4a49-ecdd-4418-81e0-2d91e4ca3315", "comment": "Malware payload (Mirai)", "value": "e6189d22dbca2ddd25d356b18fb2b9b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019746, "uuid": "b8d6b4b5-6fe9-4232-b080-c8e9d27b60bb", "comment": "Malware payload (Mirai)", "value": "0583843154f4df6a8ea42b6edf56b4338386fcd00d589d7dd60e1db7f89fb88f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019746, "uuid": "0c88acb8-0183-45cb-8bb0-06ec3a51d096", "value": "T1F6A3094ABC409B15D5E056BEBE1E528E33231BB8E2DA3202DD145F247BDB95E0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019746, "uuid": "55600ab5-1a6f-4a55-86d9-3b0c28557058", "value": "3072:sPt82e3I8/M/aHjnNqUAwycztKIe8xnhTI4hGQinB:sq2CItyHzNL+cztjxhT5hS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737019746, "uuid": "8cd2dbc3-037e-461f-9995-80a71ee72c3f", "value": 103336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019746, "uuid": "7c0d9e64-3459-45b2-b94b-03d4b1d98a81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc6d3fe1-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1737020475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020475, "uuid": "19724ff5-e10b-4567-b94f-c46260571502", "comment": "Malware payload (CredentialFlusher)", "value": "63ffe30886170ca1e35e592cf16bde37", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020475, "uuid": "75dfa549-0f7b-4499-95d7-69e517c507b9", "comment": "Malware payload (CredentialFlusher)", "value": "37b28719bb10c54c16fdcd66dfcacf41e68f1a0e49997c4401a54952298c4f47", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020475, "uuid": "1e61b35d-89c1-4d65-8b64-2ded5088d2b7", "value": "T1CE259E0273D1C062FFAB92334B5AF6515BBC69260123E61F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020475, "uuid": "1337b529-57e2-4896-b965-3fc8c902c7ed", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020475, "uuid": "79ad0cef-af80-48c9-9c83-7f88c8f7d8e9", "value": "24576:8qDEvCTbMWu7rQYlBQcBiT6rprG8aURj:8TvC/MTQYxsWR7aUR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737020475, "uuid": "d361f256-bdbb-4dbc-8587-1a14a00cbbdf", "value": 965632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020475, "uuid": "ab42524d-b65a-4f5c-bccf-187b8fa51ff2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fea8bb3-d3ee-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737020596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020596, "uuid": "4a4cf875-b15e-47d8-9059-2a6ff2174e6c", "comment": "Malware payload", "value": "3a56b8e258fb7dc6e487f35a34edbf05", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020596, "uuid": "3df37afe-677a-4a75-832e-aae697e272e7", "comment": "Malware payload", "value": "c53156e85e3126a7c81d3f272f73370c8d264779d488f520977daeb9347c46da", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020596, "uuid": "4a5ff448-ee39-48af-919b-a44ec8650aea", "value": "T1FFC36C62EF740F4FD8ACCAB4867F820B15524CA295C1826953BC5C9CB7AE7664BC3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020596, "uuid": "d38dc29f-9725-4f89-af9d-40a3d913123f", "value": "3072:j1er8QFoDpFoUkWsdJ+178/ppFFaG8oSnZn:j1e8Qwsj+o/pzF1w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737020596, "uuid": "ce0e1c3d-cf7c-4b01-bc1c-cae689a84877", "value": 128632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020596, "uuid": "4e16fe99-546a-45e7-b6bf-5a892f788e5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dacca2e4-d3ee-11ef-856f-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1737020829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020829, "uuid": "fcc7dfd6-b103-44a0-8b41-c5005d454109", "comment": "Malware payload (RemcosRAT)", "value": "7c4008e1935a4790f5b21363a016ab87", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020829, "uuid": "54b3b627-4058-41b7-b892-f5e403b07145", "comment": "Malware payload (RemcosRAT)", "value": "f1d37c8a16b7c2ac46037122c04a811e171262de873311870d863c9b4167e35c", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020829, "uuid": "ab3c816b-4e28-4d7e-b456-e7f58556a2c4", "value": "T1D4E4BFB58255EC9F0E1C0E61F9180B4A5C6C48D7E6B8D2F87E82B4F986560A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020829, "uuid": "8346d33c-68e9-460d-a7fa-26ce5de3dc71", "value": "12288:NpKEbS/VVPZnS9+PGjDDaCK4HV65ejI3QYEBA:uNNVPZnKD3JK4HV65ejIgYEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737020829, "uuid": "d10b313c-179d-4d04-bdeb-23f9638bd1ec", "value": 658092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020829, "uuid": "03bec6b4-5052-45ba-ae9f-7eeba091e962", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbce6f76-d3ef-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737021234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021234, "uuid": "db38f844-cf52-4b2d-a49b-7b02ca7e3133", "comment": "Malware payload", "value": "dd8f9da8f2172ebf1fb4f85f83ffd191", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021234, "uuid": "63e12df5-0713-48ca-916f-6f45b28ad333", "comment": "Malware payload", "value": "cf0a8d7b9bba62cedb94b058693ef2c3afe4e41cd4c82f4fde9ec529e99834f8", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737021234, "uuid": "184ca5a0-6a5c-4f4b-92cd-c6b4382b8ae2", "value": "T1BD716322E96EBDA4473A73700809289AF3C70B1357615B09FCDF251FDF78610E35AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737021234, "uuid": "ce91720b-c39f-45eb-a325-286f25cc5fad", "value": "48:zOhhqNGDj3J7EOJtQsFURf+ZfsIZOr7Fk1JdALkbYL2H4Wb/w/CO:zkq0Dj3J7nJtZUaOr7e+kkL2H4m/S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737021234, "uuid": "c4a5b810-7f43-4899-9eb6-1ae25664e1ac", "value": 3541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737021234, "uuid": "04a611c0-7c61-4e32-9f7b-c7387c46d638", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1419e61-d3ef-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737021243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021243, "uuid": "c2006f37-bd8c-473e-ab97-032cfcf54f3d", "comment": "Malware payload", "value": "6dedfec57278b218fe2c145fb5b20e3c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021243, "uuid": "3bf110d5-8c3c-4429-8ec8-0e9e451bf46a", "comment": "Malware payload", "value": "5b293f05ddfbcf4e70482350220f611e453873ab6017843a9e16f5245e172f43", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737021243, "uuid": "7045d909-c866-406f-b225-c8476cc9e9f5", "value": "T158D37CB5C8C4ECEED887DBCAA35138A6512DF31386C8A4E195E84F41A186D4DFFD21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737021243, "uuid": "7aea400b-fdc7-4007-a22a-4021b0ef42b6", "value": "3072:qcFWUKOFP3UYmc5JWBpbUpvSP3dtfE9jlVvaER4TY:9PfrW3KvczWvaER4TY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737021243, "uuid": "26be851f-8cd4-46c7-9df4-843bf15d01e8", "value": 131320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737021243, "uuid": "85a90b66-321b-415a-a90a-e59b076e0c60", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fac1c31a-d3f2-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737022601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022601, "uuid": "03b87ff4-8dbc-4023-aa8c-ed63abe39b70", "comment": "Malware payload (Mirai)", "value": "008c4ea512f191b60936d51b0a09f721", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022601, "uuid": "14746e23-31bc-45d7-92a8-fc0bab6a63b4", "comment": "Malware payload (Mirai)", "value": "93a28b939549985bed0569ae9878841ad9dc136b31caca5f636eceb08f8fdf6a", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022601, "uuid": "174a4e62-0b4b-41e1-9db0-158253252fa7", "value": "T1BBA30845B8425A53C6C142BBFA4F828D372223E8E2DF3303DD259F25378B56B1D6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022601, "uuid": "e26fdbc0-41d3-4516-a906-ba7f3acad0ed", "value": "3072:wiP3TwRGpa5u1vSMuXc6RXCEvi6jGgkCLnK7:wiP3cRGp8uVHADbjG1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737022601, "uuid": "f03cb7f2-87bc-4e64-8201-a8c0bb997190", "value": 103884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022601, "uuid": "9d89b0f2-e625-4c45-a265-b748c692fbf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08a9fc80-d3f3-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737022624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022624, "uuid": "be2f33ab-a68c-475f-b0f6-0c95b9adc7ef", "comment": "Malware payload (Mirai)", "value": "82749e756193ca5702a5e024b9ee1e4b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022624, "uuid": "fdeb05a9-9caa-42f9-93db-8585e1ef601f", "comment": "Malware payload (Mirai)", "value": "d0d66a20b5304dcd0c401600872813042bc7dc470108752d1c3ce52396f50bba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022624, "uuid": "6b645dfc-c7a7-4384-88c3-7de32d803c2b", "value": "T1B7B3F85AF8819B52C5C502BFFE1F528E732327A8E3CF32129D146B2477CA55B0E6B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022624, "uuid": "c3404c41-f76e-49ac-8503-388ea1d2723a", "value": "3072:NjCW7GTety8bgdNIhUidcDNI4zTDCAllQf9lnxOaiw0c8G7nDy:N+W7GTety80nf4cbzqA3Q1RQaS66", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737022624, "uuid": "2daefa62-73b3-4edd-9821-d25427e48ebb", "value": 108892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022624, "uuid": "d36b1eaf-a600-4f86-8183-e8e7df785914", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ed37aa-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1737022927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022927, "uuid": "14bd16d7-eb9b-43c2-b3c7-ada25a93ff42", "comment": "Malware payload (Mirai)", "value": "f33e3ad3d114f55dc0ead8f17c21153b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022927, "uuid": "c0446987-5e15-4983-b467-a46a56094905", "comment": "Malware payload (Mirai)", "value": "21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022927, "uuid": "5d044363-d28a-4025-bcde-572f3a552057", "value": "C564C08AED00AF61E4D521B9FA5F034973634BACD3EAB111E6249B3437CA65B0F7B045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737022927, "uuid": "c0829902-67ba-4f91-a5be-fe46e5439e87", "value": "6144:2IIKXhZtL7jOTyIG87XTabE5wKSDP99zBa77oNsKqqfPqOJ:ZTj8w6TabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737022927, "uuid": "1d051535-e345-4e32-b7cc-b41e1d4b01ac", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edaf5d2a-d3f3-11ef-856f-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1737023008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023008, "uuid": "ab5e4288-374d-4853-9d0e-3ef89e5b5eb1", "comment": "Malware payload (LummaStealer)", "value": "1cb61195a1714c3d3336e1edf4b83805", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023008, "uuid": "ceaa6b10-5445-4aad-acb0-e75a9e91eda3", "comment": "Malware payload (LummaStealer)", "value": "72763850d43999d04f76341aeea4511e1f1e16de1324de454d85d5659b665b41", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023008, "uuid": "278bd965-47fb-469d-b6f3-caaff0c5d9e3", "value": "T1A2B46D3201037C6F3B9A2ECEA4006EC10C5C3997B618D554AE899276B1FA53B9F5D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023008, "uuid": "a26cbdfd-5724-46a1-b68b-1a29b4a5f110", "value": "12288:eFwo8XkxJT75LlXBtIiR8+BYYLIaofdr2:2B9ttLolC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023008, "uuid": "e1109fbf-4b9b-4992-992a-50f813db516d", "value": 518022, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023008, "uuid": "3ffe3661-f203-4e2d-87b4-0a7d5956c9d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737023158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023158, "uuid": "8e796cf0-671d-440a-bd99-4abbdbff5bd3", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023158, "uuid": "0879e492-8749-49d9-8ef1-e9d071f53cf2", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023158, "uuid": "d7b28021-5ee3-4b0c-8686-17f52f7b3baa", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023158, "uuid": "2eefc147-7e36-4394-94d6-0690d1f79ffe", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023158, "uuid": "b9a01cbb-2ffd-4ec6-bc3b-2f07b59d60fa", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dee7c9f-d3f4-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737023304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023304, "uuid": "3e3a23c3-eb60-4d2f-b472-0b40d03b7d22", "comment": "Malware payload (Mirai)", "value": "c31e9071337d543ba0dc6d33c4a0358a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023304, "uuid": "1c599b78-e6fd-4f7c-a062-e7659c0d2d03", "comment": "Malware payload (Mirai)", "value": "1f2d97934ebcc3ad4f3e4c53ebe71c805726b06058bc45efb35f4c5eda876763", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023304, "uuid": "59c1f366-eae5-4ccd-9095-3544743427d3", "value": "T143A33B02B30C0B43C1631DF12D3B17D1D7ABAAC122A5F2456A1FB74991B2D37B946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023304, "uuid": "a7477c14-3b01-4c12-80c2-75665c411cdc", "value": "1536:9D6SbYYbGTCGw9aDSSiHHQc9uy0+ovGh2AqATsoTn5b6VRjokwnkAm:9m0YYuUTSinQsU0TVT5bYwnNm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023304, "uuid": "227c6340-6275-43ca-8848-eabcfbc5ccd1", "value": 99888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023304, "uuid": "00f3d409-686c-49dc-bb4c-77f6ed14b388", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4645869-d3f4-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737023315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023315, "uuid": "2a9d6c2f-d28a-40ea-a374-a563cfe77b8b", "comment": "Malware payload (Mirai)", "value": "cc292185870968396e2458af7b73c077", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023315, "uuid": "62ec5f5a-d55b-4327-a7b8-1d49f9fa9dd3", "comment": "Malware payload (Mirai)", "value": "89044c2257d13970610b0ffad3f70352a1f7b6b70eecff87be3ddfe11736f822", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023315, "uuid": "bfcda139-c8ff-4b0d-87d6-457633089286", "value": "T12EB35A22B6710E1BC4C0957E21F34332F2F6378624B9DA2B7E724E8DBB6455132176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023315, "uuid": "075315df-430e-46b4-9901-34db27d3d940", "value": "1536:Kq87yGK2qW4u7nPQfzr4nsMHwy4PEexaSHuqktoOo+55FtlbHUkonHy9:KfUjMsTsSRk2OoIRHJoq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023315, "uuid": "7dabda9a-fe08-4035-b589-c89f3a37ef4b", "value": 108776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023315, "uuid": "e3c58afb-70ad-48d6-a7ce-0c85e3a5a9f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eeb31bdd-d3f4-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737023440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023440, "uuid": "570e0638-045c-403c-bd2a-c147f9bab087", "comment": "Malware payload (Mirai)", "value": "714fac688f89402102a487ff4589316d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023440, "uuid": "66a4ba64-fc3b-4efb-a52f-e093a5ad66a6", "comment": "Malware payload (Mirai)", "value": "9ab408a04f52e9551c42c29e40fb0ca5b616e7b142f93953cb3cb734237235ec", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023440, "uuid": "c9b4ae0f-8f9f-4c2c-91c0-ed9185f340f0", "value": "T138C3F75AF8819F11D4D616BFFE4F428E33236BA8E3DF72029D145B2526CA55B0E7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023440, "uuid": "4c2cc787-4497-4a4f-8f38-86cc3d737794", "value": "3072:0aYC2otYbsGAc7y77BeM3lfQe7L/rfKaZIzn1oj8+ET4Ad4nLr:NYC2otYA2G7136GTrCaZIzn1ojHEw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023440, "uuid": "c6d38d6c-ce40-4f39-aad2-b2a7c699575b", "value": 122336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023440, "uuid": "5ea87deb-7706-46af-840d-4861bd0e3e26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4464f6c6-d3f5-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737023583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023583, "uuid": "88add6b0-e9b0-48e3-b8b5-db41a0673ea2", "comment": "Malware payload", "value": "96505e5f9704c0ef80db2b949b656ee0", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023583, "uuid": "0acd920d-094c-4c7b-8f6b-a3fb14ee6526", "comment": "Malware payload", "value": "fcd3e904650548abe667b4c78ad453125f7cac69459bea3ba230bd9a162a8e7c", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023583, "uuid": "2d7e3225-7f3d-491a-84d6-b25018c5d684", "value": "T1D053E87766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023583, "uuid": "66b0dd32-800a-4c2b-8d63-0089e53aac35", "value": "768:aA1fh41SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/tu2R1X1t1RB1pydQ2sAD:aA1fh41P6n2A2R1X1t1RB1pyd51p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023583, "uuid": "50795360-c6fa-4591-bdfa-2246bfb8de5f", "value": 64454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023583, "uuid": "eaaf0f06-685c-478d-bfa0-e64ec70ae53d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "969b30cb-b53a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737023951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023951, "uuid": "3841784e-15d3-419b-aac7-bc9324320d8d", "comment": "Malware payload", "value": "32327fa0f23300ea187c0d28a8bca035", "object_relation": "md5", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "malware-img", "colour": "#eb233f", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023951, "uuid": "d66d2a3b-bbca-4501-8681-137f35b57e9a", "comment": "Malware payload", "value": "0e07ca4ac789ac03d0c7d2f6ebb17a653f15796a65833ac728e02353f150781c", "object_relation": "sha256", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "malware-img", "colour": "#eb233f", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023951, "uuid": "ef1816af-818b-4d55-b16c-d66419285c86", "value": "T1A6464AB3730BFCEA7AA71E82E4052E721C742C4713541299FA8D47C661EA944CFB75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023951, "uuid": "edbb7b18-3edc-49cf-abe5-9957b24f6247", "value": "49152:uZHfhgE24b+efTje8Sl0bxmhFMzPShE9F1bQq4CUFzdhet:Ohgm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737023951, "uuid": "5599ceae-91ae-4f90-b823-4163cdf250fd", "value": 5353433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023951, "uuid": "3baee003-da11-413a-b00a-f99454d00502", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c541b0d4-d3f6-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737024229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024229, "uuid": "f12b40f5-ee4c-4504-b4e5-44a613bff681", "comment": "Malware payload (Mirai)", "value": "560eae97745c564c0311dcb9bacdbd28", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024229, "uuid": "202305ec-6499-4fd7-a557-d2ae72723231", "comment": "Malware payload (Mirai)", "value": "447eeb6fbf7ca02fe34c94645123f3d6576a6734ab192e437ed132cbff0e0c8b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024229, "uuid": "128c1580-c425-4a4d-b361-1f2673327f2f", "value": "T1B8D3C61E2E218F6DF369C33587B74B31979833D216E1D685D26CE6141E6038EB44FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024229, "uuid": "433b1d59-3a40-4d26-908a-30243ed4784b", "value": "3072:IeTOEy0p3ALo6v9U4IxlLREFxcdgyPAxHG/nSE:JjxJqvHD4AxRE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737024229, "uuid": "5898e231-ab80-47ea-a512-a5c0daff791c", "value": 133368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024229, "uuid": "6b6f0e34-11dc-422f-9899-33440435f9ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024229, "uuid": "6e2d11c0-2050-48ea-bcbf-d7ca01732f0c", "value": "t19731d11c497823f497714d9d2addef72e5a030df9a262d37ce01e9adaaaed025d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11b7633b-d3f7-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737024357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024357, "uuid": "9b392dda-329e-49e2-afe8-26f2ad460261", "comment": "Malware payload (Mirai)", "value": "33892bb715b27bb86047248628574fc7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024357, "uuid": "f5284c6f-f95d-4f14-8c33-45ced7706ddb", "comment": "Malware payload (Mirai)", "value": "026b46e26ada60201917f6307567ec260361a477cd05084bf15792f69bd74795", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024357, "uuid": "845ce9da-9dbb-4b9e-86f4-29248eeb8451", "value": "T14393391378C18DFCC485C5364E6F913AE632F05D2226B35F2794BB316E8EE213B5A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024357, "uuid": "24fa7c26-252d-4e1c-b779-6b49e117fa59", "value": "1536:X3nqBYmLl9D88OgZumniinbqaoF3ez7QS9MEdwEDQ4BAuaSwjhK67f1T:nnqBYmh9DMcNii+KMETDQfuaSQ71T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737024357, "uuid": "1dfd2040-b38a-40b5-98d0-a9e775a28e05", "value": 93872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024357, "uuid": "96c6c952-682f-4a6a-a611-844dbc073a3c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f2d4e3d-d3f7-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737024487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024487, "uuid": "fab67119-d87f-44ae-9c10-2c38f749d699", "comment": "Malware payload", "value": "dc6c5e0cb50d22226f1c387af2599b37", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024487, "uuid": "33dc51f4-4e05-4e30-a91d-cdb473f33c62", "comment": "Malware payload", "value": "9ebb8ea626cb448f7a3a4672390aa0b95556fa4176dca0f0f408351a8209a85b", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024487, "uuid": "d15d2d5d-aa5b-4448-ba02-32b9f43f6630", "value": "T166A3BF8B0E15B247871E57672DB21DA511FE9287DB0D6A58397BF08D787332E2CAC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024487, "uuid": "4bc3524a-e5cb-4764-bcc1-9b211a6ebcdd", "value": "3072:eZ0oxKb+4EfFAv1/pmXClk5dqDyTBtxFGYeoet:euoxKb+4sA9xmgkDqIbTGYep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737024487, "uuid": "59b1b503-09ed-4e32-b7f5-3adc1c161048", "value": 100592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024487, "uuid": "ca27caa6-31fb-42cf-a696-1d620563196f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c6e7361-d3f8-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737024805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024805, "uuid": "abd34cd7-a062-4df3-939b-5bc588172ffe", "comment": "Malware payload (Mirai)", "value": "80d17494f5d4e1376ed8d8fae47c0d37", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024805, "uuid": "ae085790-42d9-4786-bbfe-df6b8d351fca", "comment": "Malware payload (Mirai)", "value": "a944ab4adfccdcc9f2fa0b63e18c3e10485a906034d936bdc805ee7045434a71", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024805, "uuid": "af6172f5-6a14-4256-a8dc-7218972c524b", "value": "T1FC930995B8815A52C6C546BBFE4F438D7B2663E8D2DF3303DD246F21368B46B1E2B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024805, "uuid": "48baef23-04ce-4970-83fd-8b26f0cd7908", "value": "1536:T9pcYPXzPLOcCp1qp7Yd5QnDPv64//+FE/i43GkB66ctY/gpwSs/O3spjQTHw2/f:55PXzPMpgp7Yd5QD3643KE/i4gQg37HX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737024805, "uuid": "b27007b5-9764-45ea-9e4b-fbd4f5eaab6b", "value": 96456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024805, "uuid": "18fbfc57-591b-42fa-bae4-c3a4ae54b125", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9d3164d-d3fa-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737026035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026035, "uuid": "2e075abe-d000-469b-a1da-7d80d108de32", "comment": "Malware payload (Mirai)", "value": "3bb748da555f8c1318916e48d5fbcbb9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026035, "uuid": "aa441abd-c1be-42a2-aef4-5ed78a6aa27b", "comment": "Malware payload (Mirai)", "value": "81939051fabc6cf2b77815175146b79e99e421d20c2e6e0fb58cae2719865637", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026035, "uuid": "adb42ef1-d31a-4c19-8775-04da5b876d17", "value": "T1C0D3F70ABB600EF7D86FDC3742B90B06258C645B22A53B763674E938B64B44F5AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026035, "uuid": "adc69a44-40f1-4143-b48f-3b1088e9348e", "value": "1536:oUAA1jMU4D+qpWn4U8VQbyPRYvfXJTgxMYj9dDtLGGNIVaQEqQBZbkECPpRCnk0Z:3AOjMP+Lb8VmyPyHKxzGVa5BAHCnbfh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026035, "uuid": "97b9bf0c-54bf-4472-9dea-e681149c010e", "value": 136600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026035, "uuid": "0498785c-c278-445c-8eff-5794ec3ef714", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f59dd91-d3fb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737026286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026286, "uuid": "a0eac8f7-d5b1-4fc0-96bd-c097bcc4bb55", "comment": "Malware payload", "value": "26067b7e8870f98aac49e47585435e24", "object_relation": "md5", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026286, "uuid": "d3b62b8e-452d-4c9d-b682-126e05943cb3", "comment": "Malware payload", "value": "a32032e07c8a8a61ad8659ca64929e349c16e121d1dafc8ed528e2e620b24b9e", "object_relation": "sha256", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026286, "uuid": "c736dcd1-1aa0-4e07-bac5-cdbb02d0eb4a", "value": "T1AAA3DB2B6E1ABD019389C6190ACF38E10ABFC78DA2B3CCDD199BF1581590D285DD51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026286, "uuid": "584745ce-a9d2-4c3a-ac89-e164e4d9f980", "value": "768:UuhoqmS04xLb6ZsMKM4evK7Qv6vNUlccsnpCpcq3aC95fgwemdzCD6/oAGritaG7:UaIt4xeONaK7g2E9eXu/X5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026286, "uuid": "5a918d38-8709-4d65-b708-046124959bb3", "value": 98156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026286, "uuid": "1ad92788-db40-48b1-8a5a-952b55e69ce5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaf58a3d-a777-11ef-afe5-82aee05be84a", "comment": "Malware payload (DonutLoader)", "timestamp": 1737026287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026287, "uuid": "596bf685-c80f-4f1f-af30-457e0f87261f", "comment": "Malware payload (DonutLoader)", "value": "24e58f5be2d9137dd030338f288fc8f6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Donut", "colour": "#38b838", "exportable": true, "hide_tag": false }, { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026287, "uuid": "c34209b5-b50c-40ca-85ca-5930687a6b61", "comment": "Malware payload (DonutLoader)", "value": "cfa095a9035d5358a19ed7fbaba14489257274c0450139e29cb126fdb80c9b4b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Donut", "colour": "#38b838", "exportable": true, "hide_tag": false }, { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026287, "uuid": "de9660de-a7fc-4ad2-9c18-bb7103ee923e", "value": "T134B423719A93FCFE34A94E9406651D061FA92E8108196C9F9BED706B27FEC3C041DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026287, "uuid": "3cd5d086-8b44-4fc8-8df9-99f5db943dea", "value": "12288:6oVNZ1T+CIc4d+Rp3xz9wi135jW9RRlfuNWU:6UrB/IhdKp3h9/x61GUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026287, "uuid": "7c7d27c0-6059-4504-b67c-27e15aff6aa8", "value": 517564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026287, "uuid": "da2e9278-663d-49b0-a156-436232905f9f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f9307b5-d3fb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737026287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026287, "uuid": "4c0f817d-7c33-49e2-940a-f3d51b5cd8d6", "comment": "Malware payload", "value": "a1ad93923598c817490553b9cb2b63cb", "object_relation": "md5", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026287, "uuid": "f5d07dde-6288-4818-b7c8-1a5e6513b20f", "comment": "Malware payload", "value": "7455c606a0ed4e6249c4b7cb50841c12b4bde0eb629c6f1a0740bbed2dd519f7", "object_relation": "sha256", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026287, "uuid": "86533622-7669-4ff0-b9ef-3717468348d0", "value": "T11A93DB2B6E1BBD019349C6150ACF38E10ABFCB8DA2B3CCD919ABF1681590D295CD51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026287, "uuid": "06074d6d-7ffe-4b0f-ac08-b3a23ca28248", "value": "768:P1cbB7C6nyycgTP8T+EmOqvxhy8Mv+GcHeBxIDXIU/wq9KWQRkEJi+chA6f+Xcc:P1cbB7C6nyyTbjxCxtUuWmnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026287, "uuid": "6625a948-10a6-4527-8bc1-b3cb3dfba4d3", "value": 97000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026287, "uuid": "579a4d57-db9b-41a2-aedd-90153298bdcd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90645bd1-d3fb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737026288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026288, "uuid": "032d84a5-eb33-44d2-bb0f-e29db13c67ff", "comment": "Malware payload", "value": "8698889e137558cf68fed2482af90ad3", "object_relation": "md5", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026288, "uuid": "a7024984-83fc-461a-a969-c62857d17ee5", "comment": "Malware payload", "value": "e79f4d5a0a96c831852290bd057e188c84801810e9e61597da7c953f4c86c2cc", "object_relation": "sha256", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026288, "uuid": "6312c0ac-526d-40ed-b392-ef14f3e034ae", "value": "T14763C0579F24B68B9B5D37336FB60E9920ED4296CF6C2A191867E0CC685332D289C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026288, "uuid": "05cb48cb-3a23-4b6e-9c0e-39ab574974c1", "value": "1536:LqJus2fhZlLGqYHcigkgS3vnBR7IOXLnLnZ/JzfuOUZ9cFz:LqJ72JnnpY3vBR7NXXnZhmhKFz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026288, "uuid": "cb03bf8f-0dfc-4bfc-91bc-cae7f1cdbba5", "value": 72264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026288, "uuid": "3b0982f0-ca26-4de4-a066-616d25d77fb1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3792552-d3fb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737026347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026347, "uuid": "b45e181a-fbf6-4ebd-b3d0-db335fd7cd53", "comment": "Malware payload", "value": "bd58afc757ac902673e3c14ea6a64565", "object_relation": "md5", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026347, "uuid": "cf8a2a85-d4f1-4886-b98e-dd814ce4b226", "comment": "Malware payload", "value": "c9e5b55be290891b9fb38948d02a7aa2090351ef999de6679cb1de8091c945e7", "object_relation": "sha256", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026347, "uuid": "f64bf75a-3ed4-42ae-a617-c30ecb3fbbbc", "value": "T1CB51310167F51321F3B26B70687658521BB7B462BE40D13D9090425F08B3FA8CB68F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026347, "uuid": "5f02c2b5-b7e5-4eb6-bb6a-6b3a062c14f7", "value": "48:8d1Wh7dS0YW+QXuH/qQFVl7cs32J62X32iV:8d150b+CufqEVlws3CDX3VV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026347, "uuid": "2da2b360-edd7-4fd2-bf02-3bbb9e9da575", "value": 3020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026347, "uuid": "c092590a-0295-4e05-b30d-2d196f7bcfe8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a841c78-d3fc-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737026520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026520, "uuid": "2be92347-faec-4a69-9212-decd69bdfb24", "comment": "Malware payload (Mirai)", "value": "b16c1a6f9e453e75a7ed5fec88bbf049", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026520, "uuid": "5dfe93bd-ac4b-455e-8172-3f61a8664d22", "comment": "Malware payload (Mirai)", "value": "8eed7f9e0d0bd924ccc9ea6b644c288b69077b5fb76c5e54ac418d24620be5d7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026520, "uuid": "ef5fb0f0-f3ff-48da-b09c-7cbb8b820470", "value": "T1ABC39C87B24B9950C81303F507C74B9D6FB332428F1BEAD21D5DA23E28BD5DB68167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026520, "uuid": "886640c4-9262-4420-af85-ea0bd2addd2a", "value": "3072:3JRQaPn91+XFVB2gu9tIQvu/GSn2xrL47NTV/fnELq:5RQo9kEcG820ZV/aq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026520, "uuid": "31eee0ac-6056-448d-ae5d-e47e74752398", "value": 124324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026520, "uuid": "760e2622-6111-4751-83b1-a2a6aad13dda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47e23f13-d3fc-11ef-856f-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737026596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026596, "uuid": "fe885e9d-d551-428a-b2a1-8630d721979f", "comment": "Malware payload (Amadey)", "value": "55430f9338bfacad8968c87ce549f0f6", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026596, "uuid": "c5d3bf35-08f9-4e01-b2cb-d8ee37b62ca2", "comment": "Malware payload (Amadey)", "value": "a4c95de00c945a92cb302f8b895b703fab1024aebf187a19d2066df8c046d5aa", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026596, "uuid": "bdd57c10-0828-4a7a-a259-79e2820d7ad3", "value": "T1009533773BF2E19EFE928FB565D713405DB0A83E789E7192B0154E7C628B68F04814", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026596, "uuid": "c3350da3-0dab-4568-825d-40373b66ca1f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026596, "uuid": "2b08b83b-342d-4ef1-b0a6-1451d2a81617", "value": "49152:F6DGNsYkN2XJizTwOJXZboQgISHFDOZpV5pRwDo7Q:gDRYkN2JizTvJXZbyl6ZpVmZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026596, "uuid": "3b5c330d-95be-4c03-9e25-f59c7e2e3437", "value": 1896960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026596, "uuid": "cc3ebb2b-6e8f-41fd-b1d2-e5eb1397a042", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0bbd42d-d3f2-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737026653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026653, "uuid": "9d0003cb-05be-4211-bd39-43424550e1fd", "comment": "Malware payload (Adware.Generic)", "value": "ea98ed9dc4ad5a8d582a208f81c59781", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026653, "uuid": "54a37e7c-c587-47ec-8c24-53bf44e02eaa", "comment": "Malware payload (Adware.Generic)", "value": "291b8c62469521db9aa05e405cc1df59d5fd78324843bb74ad3cc5e53fd0915d", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026653, "uuid": "b9fa5ff4-26b7-411b-b667-0c5be79cb2d8", "value": "T160163306CAD8E554F201C6BC4BA97837096B7E411A789009B6F8EFEA4F3FD53B4191", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026653, "uuid": "2ba4aeed-9800-4b93-b7b8-e2322f786cfb", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026653, "uuid": "52516dc5-f2c4-4c44-8f7a-19e97e3c133e", "value": "98304:4lavF7lJR6GG5WVz0k/tyedo5H1u3axhRTfG:lNlJURne6Z1uqjlfG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026653, "uuid": "a8fe8bbb-737d-4280-8c72-120fa198b1c2", "value": 4074594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026653, "uuid": "71b3c190-2807-4d5e-b5e1-1fb88ee3fbcd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7e563b7-d3fc-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737026837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026837, "uuid": "835461b7-4cb5-43de-8cfa-94fceb43c6b6", "comment": "Malware payload (Mirai)", "value": "0f965b407be229602519e15763b672a7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026837, "uuid": "445dc83e-5bb8-4fae-8cb9-0fc8bc02b5e0", "comment": "Malware payload (Mirai)", "value": "d5daf101953571f78d3fc26da018cd65ac1ddb247d8047fe03a4f425d077e9cc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026837, "uuid": "e7a4390a-2bc0-49da-8a8b-652c8210e19e", "value": "T18EA33BD6B500DEBDF84AC33741170A1AB331B7565F422A32B3537677AE680D46D2BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026837, "uuid": "2a0d519c-0b46-4b16-9761-19a879798a96", "value": "3072:4lhsvXwKLOH4F/hOIJyNVSoZSNIyaKbJj:uvkXyNEoZSeyVj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737026837, "uuid": "56471867-d5d0-4f22-a9da-c6a7785a7578", "value": 106740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026837, "uuid": "0fd1493b-c1e9-4b73-882f-ad4118529819", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38c107d6-d3fd-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737027000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027000, "uuid": "afeba6ba-20f7-4fe2-b76c-85f020c7c4d9", "comment": "Malware payload (Mirai)", "value": "654e18b41bc61e95f09f803285506dec", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027000, "uuid": "df98ca8d-4b90-4631-912c-cfdada7e5840", "comment": "Malware payload (Mirai)", "value": "97fecebcdca212450260bfc28aba217b9ee0631aa154db6682d3ddc602504236", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027000, "uuid": "66983b5d-5df0-426b-84ca-2e8ddcbf2daf", "value": "T136839D63D8A52E14D945E5B9B4B08B7E8B13F59185032FDB92ABC3798043DDCFC0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027000, "uuid": "56ac8439-b0be-4f82-9a30-40a75ff67a67", "value": "1536:Ki74fhSv2CEr3NdY2zX6agK9RxM70oszRC7WKJTnkfb:KbS+CEr9dFxn9I9szRShn8b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737027000, "uuid": "e27c42d9-dd15-447f-b08b-dc51f2386df7", "value": 85184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027000, "uuid": "ab7cdac8-d793-443f-9d60-6caf2126f98c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb7589ae-d400-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737028508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028508, "uuid": "75cdb28a-01c4-469a-a560-2737822165f7", "comment": "Malware payload", "value": "48598a8b14ad72d5fac2c7c2fb341a38", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028508, "uuid": "8d79e8d1-3608-43ae-9d9e-0a8f0fb64210", "comment": "Malware payload", "value": "a01dc6ea0b57c44b4c4dc0c9fbbb68931d842052e16b338367ddaab3df3aa048", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028508, "uuid": "7335e8e7-9179-4002-8c61-7723eae483a0", "value": "T10AF0E531C622D31DDE596BB0A2A73F72D1A4A319A14AE14D3A27C2609DC2140A87D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028508, "uuid": "f6313299-3957-4e0d-b1d8-1eb830400201", "value": "12:5tPXHAXcZXz8QlNO1I7YUwDX6SVBEXcZX4CCiJ:HS0YkNOWiJw07P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737028508, "uuid": "5964d826-49c1-425f-87be-04ce37ef0e7b", "value": 509, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028508, "uuid": "39b06ced-3d01-4fa5-9973-2757b22aceb8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b81782a-bae9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737028925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028925, "uuid": "b1001387-7287-47bb-bfe3-6492a7b1b822", "comment": "Malware payload (Mirai)", "value": "c3de148809b39bac2b0a4f78148f55d3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028925, "uuid": "9391ac4a-bc76-4357-af6c-4bfd4c7d899c", "comment": "Malware payload (Mirai)", "value": "7da3d4805795ca85be0e764d732cead98cd68b6a4ebde6b42cc56bb81979eb20", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028925, "uuid": "34dcc127-008f-40ca-bbf6-c521d8141c6e", "value": "T1CC933949BD819B21D8E532BAFE1E018933135BACE3EE71129D205F2577CAD2B0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028925, "uuid": "32659a09-8c6f-4033-858d-edd5db9a8d4c", "value": "1536:honGoHHkTQTJUv0COEcSs54aUw0i3H9ayxBfLhKXgU/I53z2pl9ljU6ir8YMh:zkETQNUv0CufuBwt3dZpKXgU/I53zFvE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737028925, "uuid": "9a581519-6ada-47ec-a446-90211b92e34c", "value": 90140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028925, "uuid": "91fb0e36-f99d-45f2-9988-fb4cda6f703f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcc59444-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737030950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030950, "uuid": "e2dcb0a6-c6b5-41ef-b5d1-5cce71f8e59f", "comment": "Malware payload", "value": "1c7fc56a89c9361a57207cab64121378", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030950, "uuid": "37c2fecc-ad78-42a5-a966-53d84d0497ac", "comment": "Malware payload", "value": "e6c10b6eede083d612c81cc6e5add79c2f55a2691a5f19efe5e0b8d1ea7064c9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737030950, "uuid": "d9b11b66-5529-48f0-bf70-73a5790349e4", "value": "9BF2F1A11351275CC725EBB53DAE701DC43C211B32A90E402AD3A68AFE4FB245876EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737030950, "uuid": "7e8f9719-7eb1-4a89-ae5c-15ba83a440e9", "value": "768:/kAKuobq1rduMGAXSEYEYv6DjbChaAUKvNvy0G:87vbq1lGAXSEYQjbChaAU2y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737030950, "uuid": "a4227210-6a90-4faa-aae1-c40320801578", "value": 35040, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbce6b8d-d40d-11ef-856f-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1737034145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034145, "uuid": "4317c7fe-faf4-4eb6-9bec-c75b283bd8d7", "comment": "Malware payload (NetSupport)", "value": "cb2f8714d903ee68eaaa52b78261eb00", "object_relation": "md5", "Tag": [ { "name": "ItalianPasta", "colour": "#f1f9a8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034145, "uuid": "dec82887-c862-4138-8161-d1baf40071ad", "comment": "Malware payload (NetSupport)", "value": "93f204a36a7f6ac6c77d1fa6aff94f05d40a1cccc0b76c7740e622ac3182c531", "object_relation": "sha256", "Tag": [ { "name": "ItalianPasta", "colour": "#f1f9a8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034145, "uuid": "502b4039-0964-478b-bf61-16baaf52624b", "value": "T1CCE0AB079124051182055C5FEB33B881DA89482AF1663586BAD5A8FEB89255C653DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034145, "uuid": "ed716b83-11ff-4f3f-8526-e3a3476510e7", "value": "12:bUBBaIkuK1yIgP1OWu0tHz98RB2DOexWb2RKJFtH9fR:gBBaI9IgtOWv6n2DOIRwpR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737034145, "uuid": "f9ed37a2-2a6e-4d1a-9b22-19da78ef4777", "value": 423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034145, "uuid": "0c26c383-e4dd-473d-97c9-7eecc931c86c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737034390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034390, "uuid": "ff7020b7-97e5-4270-9f05-be0eb6356d1b", "comment": "Malware payload", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034390, "uuid": "09d82f2c-00fe-4d8a-ac6e-eb2c9afdb817", "comment": "Malware payload", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034390, "uuid": "e8d3a590-6acb-45d7-9555-dd74c377fff1", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034390, "uuid": "593e4773-613e-47ab-b332-dbab8e514b2d", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737034390, "uuid": "4eb8b941-4de4-44fd-9452-5e93ed6c17ca", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737035166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035166, "uuid": "c17bd281-04c5-4950-a8be-a2d239702fb3", "comment": "Malware payload", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035166, "uuid": "5fec06ea-9810-4b94-9470-601d65699ec6", "comment": "Malware payload", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035166, "uuid": "e97bb5d8-71ce-48b8-93ef-dc3257f261ab", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035166, "uuid": "7b7c86f3-156f-4329-abfa-80f851d9052a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737035166, "uuid": "fef3a8cd-a332-4efe-a30b-090419f2ea00", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b47e842f-d411-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737035797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035797, "uuid": "a9d7f172-88c2-4b2f-92c9-c514d08ee8b3", "comment": "Malware payload (Adware.Generic)", "value": "c4f39a8b2ba24239f952435880dfaa93", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035797, "uuid": "d3f75485-af90-4be6-9039-9dcda92949fc", "comment": "Malware payload (Adware.Generic)", "value": "14ce834bf77d20863a56bc88ef7ae89d59423961959c59d89fdce41b8430dd19", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035797, "uuid": "da8312a1-b35b-463d-a45e-ccedeec1feab", "value": "T11A16332B16F2C9FDE5C54B30AD9AF21486B3793325F21C64B3EE4A4E2B73D4089197", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035797, "uuid": "37a4b4ab-0fbb-42c9-a851-4e0e4446c563", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035797, "uuid": "e4ab9316-b9dd-4bfd-afb9-9268cf7e482f", "value": "98304:4FMiCzDnt7MyGNZ5c+0etxM0NiWUxfwPKtlf+dtg:NiCzJQrJ1BGIPKky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737035797, "uuid": "a5af76db-bf1a-4a6e-96d7-fe80b4efbf01", "value": 4051429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035797, "uuid": "af074107-0f39-4d66-9947-bc671cfa01e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c01488b-d412-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737036105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036105, "uuid": "eea93404-1df6-4c18-88c4-88b7af0d6c49", "comment": "Malware payload", "value": "6409da42050c8d8af9257b0993595d37", "object_relation": "md5", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036105, "uuid": "5ce885e2-e3a8-4465-90a7-7dc8c566b15b", "comment": "Malware payload", "value": "fcce274945384b140cbfde328fde24726f1c1e88a45bade20cf5bca18b6ed77a", "object_relation": "sha256", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036105, "uuid": "78c76552-a086-487f-9bb6-99d5157e28ca", "value": "T1D4B423770C476CEE1F8C96CC78BE1F4A9EFC0DC2940D565CAD9DA1AB06DE8608E059", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036105, "uuid": "8bf03a6a-5948-40aa-9ca3-46370dc5aa47", "value": "12288:UFN6dInftYpoFFWFhzcKZLTQ97Duu+NlshiTizqG:UFMdInea4FhVmGNl8tz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737036105, "uuid": "503a8c29-20b8-4f73-9176-9711231ce1df", "value": 533264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036105, "uuid": "d8dcd897-6f88-4773-a5c5-4fa96dc1de54", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec677be7-d41d-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737041045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041045, "uuid": "ac5e4b53-f8ed-401a-95e7-f8095ed64338", "comment": "Malware payload (Mirai)", "value": "0219e003b6509770234e3b2213f97755", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041045, "uuid": "b459c25e-f006-456e-9a40-a1a2186b6d0d", "comment": "Malware payload (Mirai)", "value": "6a21d9dad02f7d0f812415718b382417ee5214ebefd2af8e8119e2f5c34d10cc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041045, "uuid": "b0cda929-30c6-41cb-a17b-35b0b907ba6d", "value": "T1F951A3CA359443323D6669B3B1B984D8B3D7D6ED91C49EA093F838A8E0CDF18754C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041045, "uuid": "448fe0b4-dd01-42ef-96ee-96b5a48fac5c", "value": "24:vlS/sQW3L8oQ5kLPy/NCog7o7ovQrpSXcLPrBaBjd:vlS/cL8oQ52PEfg7o7ovQdSXc7daBjd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737041045, "uuid": "70795cdf-5a1a-463f-8341-7a060e99cdde", "value": 2562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041045, "uuid": "30cc939f-3e5a-4761-bcd7-bf7dbc4ac0f5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acd3dca9-d422-11ef-856f-82aee05be84a", "comment": "Malware payload (StealeriumStealer)", "timestamp": 1737043086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043086, "uuid": "792ce73c-4a79-4aa6-8eea-f1c20d9029e8", "comment": "Malware payload (StealeriumStealer)", "value": "036ba72c9c4cf36bda1dc440d537af3c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043086, "uuid": "5ec4c353-06f4-4156-8bdd-d18c7dec65b5", "comment": "Malware payload (StealeriumStealer)", "value": "bb41ae95f911a55ab1101ca7854918ec0f23548376d4846a2176b9c289102114", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "fd5da431-ff24-4f00-97f6-961fabd7d888", "value": "T1E4B314F1A740C465D8A796B9883BDAA7A433A24DDC68490D3C92FF0B7D723474027D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "9c74d062-a22b-4121-835a-ce416baf8207", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "140aed88-7641-420f-a1b7-f25af3a9494a", "value": "3072:2WChbWsb6GMVumsolXIrRuw+mqv9j1MWLQQ:1DVuDAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737043086, "uuid": "de6fb724-0a2f-4163-b06c-beade740b30a", "value": 110080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "3a717595-7132-416b-85c6-b93759e896a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acf948df-d422-11ef-856f-82aee05be84a", "comment": "Malware payload (Stealerium)", "timestamp": 1737043086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043086, "uuid": "2af82a26-aaa0-4a09-9136-300ce1ac1d67", "comment": "Malware payload (Stealerium)", "value": "9d347d5ac998a89f78ba00e74b951f55", "object_relation": "md5", "Tag": [ { "name": "stealerium", "colour": "#03cdde", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043086, "uuid": "94291887-9286-4fa9-8a52-3a48aef59ea0", "comment": "Malware payload (Stealerium)", "value": "2ea5686422bd8fb6eda542e9a96588f9deb1c97c45f3cb7d3b21ac4da540b57c", "object_relation": "sha256", "Tag": [ { "name": "stealerium", "colour": "#03cdde", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "146e4b86-bfe9-4f4a-875e-f60d696d8aba", "value": "T13973CC81E6942B87C91A12350486EE748730DE091A298E4E2EE7FD6F7C7777F1C225", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "20d97e07-256a-4335-a24b-abe9f5ab9043", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "9d8a71da-7a08-4fd2-a778-d59d3862043d", "value": "384:ytBuEejMVr2gy0mK1SvySYS4SRmbESgSNSsiKjHxqD4fpBSIxoI2AAgz:y+EjXQL6SYS4SRmbESgSNSsiQJxBSQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737043086, "uuid": "01dc1ab1-c730-4888-819e-dc3717c96a7b", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043086, "uuid": "5b07d964-c02e-4485-9273-93b90f01cd69", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5b77bb1-d422-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737043208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043208, "uuid": "f2598adc-b211-4dc5-80e4-a91257d3e4e2", "comment": "Malware payload", "value": "e3ed4502810ce0bffeec8ab7e45f9a91", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043208, "uuid": "280421da-10fc-48ee-832d-dc96aad2bc61", "comment": "Malware payload", "value": "bbfbfb15ed06fde20060889cb48a60e758d6f95ef525e32f3fecb37b769b03cb", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043208, "uuid": "5e090747-fb28-4baf-b805-b9eeee4fe23f", "value": "T1378302A1F38184D6FAE2DEE30BF82425EDF9520F7386803D9F5F50618927A114897D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043208, "uuid": "12687c5b-af9f-4d44-a5c2-6282a5d5eef1", "value": "1536:1ZGhoAxcNeObNz5s1WuOzD2cCNoUMTgYA2tTyP+pDTra4u9+cRE7F+yknBEBiH:fKoSIeObNDuMDfrvSayP+Nu9HiF+HBEo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737043208, "uuid": "79414903-37b2-4110-8281-7ea44f47fdf3", "value": 84032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043208, "uuid": "0225536a-cf4a-49bb-a68f-707c5523d9cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46c8ca27-d428-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737045492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045492, "uuid": "cb18ff43-03c4-4deb-bf2f-e71b0b8d9633", "comment": "Malware payload", "value": "8c0ac26fbac620788207b52d6920830c", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045492, "uuid": "d6d0de25-ff6d-4251-9ce0-7b578e170e36", "comment": "Malware payload", "value": "89ea6c985e9bd47bbb90aa6f4ea0d67ea6463e7459ea37f2d803727ebbe15a01", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045492, "uuid": "c82229f5-3502-4147-be9f-907e99d9dce6", "value": "T1723533F2DB6C5EC5EDD398FC569F70158E0E1F9F0EB501CB21F39A606989615B2380", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045492, "uuid": "a3353bf8-349f-42ba-b142-89fb0932cbe5", "value": "24576:yTSnysFejDqCPlbkyPjOU5+JKZdVtOpdfWncgQL159pYF36ofB:gecqCbk2jOUVZXt01TLDDYFr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737045492, "uuid": "32d5e855-db08-4735-b271-358ed1d268cb", "value": 1159066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045492, "uuid": "0abe0816-6cda-42a0-acc3-b3bd8573adc4", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ef2dbf-d428-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737045549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045549, "uuid": "86859af0-2d01-443d-a446-d227eaff0bfb", "comment": "Malware payload", "value": "a64090f948a5c59c237f6c925fe7fa53", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045549, "uuid": "4efb6cf0-95b8-42bf-8ea3-dd69f86f80c0", "comment": "Malware payload", "value": "1c418ce0fa96d9026a4e8bf78e222bfb158aedfc95c86c1e5fcec24a2099b6ea", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045549, "uuid": "a335cd3c-33bf-4979-b5f4-8df97bce3bb6", "value": "T13D7412F7E8683E91CD1409F90AB278715C9AEEDF3CFA0A63987B2C6474D415271F40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045549, "uuid": "e7d3a109-79a1-4736-b4f6-15ed9a27146c", "value": "6144:UqwSnAH63vY2P/w6hPS5UfQ7bPxY6h7Sd4e1OuPXy+pTVdF3WsT:CSnAaYIg4MNMmwfrxV/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737045549, "uuid": "d2ca38d4-cf09-4951-a9b9-75b9f4720929", "value": 363492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045549, "uuid": "d4929e6e-7480-4eb5-a615-8293bdbe16a2", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30476c89-43b9-11ef-8412-82aee05be84a", "comment": "Malware payload", "timestamp": 1737046087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046087, "uuid": "899e2888-7a25-455b-b25d-ebf1b44f792f", "comment": "Malware payload", "value": "26e28c01461f7e65c402bdf09923d435", "object_relation": "md5", "Tag": [ { "name": "inf", "colour": "#C0D8BE", "exportable": true, "hide_tag": false }, { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportModules", "colour": "#c73ed6", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "NetSupportRATModules", "colour": "#75e864", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-opera", "colour": "#9B0C3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046087, "uuid": "17b9696f-2252-439c-8c50-02be92b3e1bc", "comment": "Malware payload", "value": "d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368", "object_relation": "sha256", "Tag": [ { "name": "inf", "colour": "#C0D8BE", "exportable": true, "hide_tag": false }, { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportModules", "colour": "#c73ed6", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "NetSupportRATModules", "colour": "#75e864", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-opera", "colour": "#9B0C3D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046087, "uuid": "3988b5eb-e77c-4c38-b3dd-ff9125ce02ff", "value": "T147E0260E4C8292345B93769A631349A293B40060D8B60A4034EB4A35314F08F028A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046087, "uuid": "443e3e4e-463d-449c-a9c3-62cf6d8ae276", "value": "6:a0S880EeLL6sWqYFcf8KYFEAy1JoHBIr2M2OIAXFYJKRLIkg/LH2yi9vyifjBLWh:JShNvPG1JoHBx2XFhILH4Burn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737046087, "uuid": "dbf57888-c51b-42ba-a48e-7dceec71559c", "value": 328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046087, "uuid": "cb0a5795-fcb8-46ab-a97b-ae395585db0c", "value": "application/x-setupscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0521d604-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737046102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046102, "uuid": "2b824c77-3bf3-4f38-9a9c-4e52fb809543", "comment": "Malware payload", "value": "0e37fbfa79d349d672456923ec5fbbe3", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportModules", "colour": "#c73ed6", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "NetSupportRATModules", "colour": "#75e864", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-opera", "colour": "#9B0C3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046102, "uuid": "080d903b-5a0d-46e7-8697-631566487fc7", "comment": "Malware payload", "value": "8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportModules", "colour": "#c73ed6", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "NetSupportRATModules", "colour": "#75e864", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-opera", "colour": "#9B0C3D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046102, "uuid": "ea697bea-f93f-4a05-9159-9cefc5dcd1bb", "value": "D3F49D11B692C073C1B221300629D7B25D7BB8711035946BBBD59F3E1FB47C1EA277AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046102, "uuid": "4ddf8324-3488-468c-9172-48630810ff62", "value": "5271d5ce8b44dd47bc92563e27585466", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046102, "uuid": "23196d03-1304-4c5f-8da6-ba1e3cbb1a21", "value": "12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737046102, "uuid": "5e9ee972-77b0-4f40-a768-c3837ce71f4e", "value": 773968, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0521cc22-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737046102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046102, "uuid": "aa2af5e9-c1d0-4492-be20-a1d99c4d43fa", "comment": "Malware payload", "value": "00587238d16012152c2e951a087f2cc9", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046102, "uuid": "53e48e2c-ac70-4ff8-be81-d55cdf834e98", "comment": "Malware payload", "value": "63aa18c32af7144156e7ee2d5ba0fa4f5872a7deb56894f6f96505cbc9afe6f8", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046102, "uuid": "4438b69a-4b7a-4866-a929-a0d30a43bd52", "value": "25060831E544CC72E156407ADC7DAADD41162DA00F1886EF398EB9692FF23C422F9E5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046102, "uuid": "368f41d8-e9a8-48e5-946a-5cf38f1e7a96", "value": "fab3f5e51d68854b40464fe79efc29b7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046102, "uuid": "c7913e8b-6200-47cc-a70b-a187d11706ee", "value": "49152:cTXNZ+0ci2aYNT8wstdAukudJ1xTvIZamclSp+73mPu:cTXNo0cpKwstTJIkS43mm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737046102, "uuid": "76d72bfc-6e9e-4ada-bffd-591c69f6fe11", "value": 3735416, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0ab8fc5-d42d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737047924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047924, "uuid": "b91f8b7d-215b-468f-8a1c-7af9097317a2", "comment": "Malware payload", "value": "0e30f86be2d6beeca2f9e93a5e90be49", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047924, "uuid": "2995e025-ad93-4285-b5d4-dca840529859", "comment": "Malware payload", "value": "1887ee2896b4287a2f6f6641f348db3e752b35a10fd552c2b35e9e5593369337", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737047924, "uuid": "4e39d34c-1647-4974-9e47-e3b5c1cc3f6d", "value": "T15D215330A2D0559FA1F6E21FBCF17509939C876ED83DC46B226AC8AD2703F3048915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737047924, "uuid": "523aff01-4689-4cf3-9a57-b3ba53e231f7", "value": "24:GrjelG+X2hSAE7T5TtHKl9FQ/EGc8DefwdCxnAVUSYq/tcvvTmvfLLuTBn:nlG+Rp7T5TYrFbGckefwsxnA2tqlKTsa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737047924, "uuid": "9728dd85-9178-43a3-8f25-73dc62436623", "value": 1359, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737047924, "uuid": "47b717a6-8951-4414-bec8-beeb9a02bff1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a36e80f-d430-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737048934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048934, "uuid": "00e0cc9f-ffb2-4ffa-b7ab-9d8e4478639a", "comment": "Malware payload", "value": "cb30440a1e4ff567426855584ea25e07", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048934, "uuid": "21bbd0a8-61bf-4b13-a564-33cdf7f77c41", "comment": "Malware payload", "value": "f63d81fd9b462e0ee49be0ebd00ca49583f9984c72002df2020b37586d661f93", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048934, "uuid": "210c97f4-d312-475c-a7eb-1afab98be126", "value": "T191557E27F14180F2D214217165BA673AB9707B360E258E9BE3C4DE7C5C626A2D73E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048934, "uuid": "66e87c89-cb6e-4081-b915-9c58c8ec94e3", "value": "250409c527f1649b3c9d070403de40d7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048934, "uuid": "7e339818-d814-4229-b218-1d98669378b0", "value": "24576:FBp2ap9fP/Qku+Zwc8SAhO+IDz2R8m26uZLiVSJOdoYeXL6NuYzABVivx/QOtD3G:FvlfPM+Zw7bez2R8m26uZLiVSJOdoYeF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737048934, "uuid": "e605cd0f-5e98-4e3a-8533-1da0d2b1292b", "value": 1339392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048934, "uuid": "3202e3fe-9224-4bae-aabb-71868bc1339f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29008014-d434-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737050596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050596, "uuid": "44b71931-fcdd-4c47-9116-0bcfabd98e21", "comment": "Malware payload", "value": "b6c5edcbd1a660ccb07aac2710c9ab2e", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050596, "uuid": "1c19e909-0109-4e3a-91bd-cf07fe3c71ca", "comment": "Malware payload", "value": "f9546598b2861b05702c014aeeaf2804fa7f9f7eed2345c91e176e150a286ba4", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050596, "uuid": "f62726bb-b626-4c03-a3bb-b0ae1c4d0236", "value": "T1D9D55B92B545B1CFD08E3A788627CD82586D47B90B3948C3ACAC74BE7E63DD511BBC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050596, "uuid": "e749e500-e328-413b-bd89-83e80ec2e87a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050596, "uuid": "1d4f3170-0089-4cc5-9177-a64755dc0799", "value": "49152:+CTM/EF45mn2ltoUxBwf2AHrziLgqxF/SIGTTLls52VgKe:+CkEF48nitoUxBwO6ruLjxg153", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737050596, "uuid": "9fe2fe66-6535-4c1f-a260-87a75c59b1fe", "value": 2988544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050596, "uuid": "e7bff6c0-39bb-4944-91f3-67beabff539f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09e2b597-d435-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737050973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050973, "uuid": "7d44dbb2-e194-42b9-819f-145e079f4cc1", "comment": "Malware payload (Mirai)", "value": "4d1f66673a0e00578af906044a544b14", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050973, "uuid": "48eeeeb4-e9d6-4b81-8b8e-7768d97886dc", "comment": "Malware payload (Mirai)", "value": "7f4087e0ff2f51b67b857a3d2da02cf930a55c0f8afec8f480250e357ae4b9d0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050973, "uuid": "ced02717-40a3-4bb0-b8b6-5d955604e810", "value": "T1E9B2CFA81F092BF8DE0EC0790AAE17013E741F706653ED4E61B1EE624D5F4E825925", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050973, "uuid": "06ed2d1f-96a5-440f-9292-6c7bbc369c86", "value": "384:6eD8ZSH2LLZUYyGZbsOiTuUsUPii44nUtq/BSRPJ8oO0FlCmd1JgGlzDpH7uNj16:6eD8ZSWvZHZbs1uUxPvU8sRPiz0FYi17", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737050973, "uuid": "3d1ed82a-a897-42da-97ca-645192f48e06", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050973, "uuid": "31c07f62-0450-4c71-826a-2b5ecae0eaaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02c90ecc-d436-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737051391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051391, "uuid": "c3c1b8c7-8c8b-4ad3-937f-e8ac9b5d963e", "comment": "Malware payload (Adware.Generic)", "value": "b407049bfa18f6de174ceff91596d805", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051391, "uuid": "38fd8c14-78c4-4863-b01c-db9dbd3d2891", "comment": "Malware payload (Adware.Generic)", "value": "36b8e823c6115db9d518cb119e3d9da8cce599d5d0661d010aeef74a702e2ee2", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051391, "uuid": "9ca2e8ab-32d4-4efa-9654-d0b82525f4ea", "value": "T1E706334ACAB9C1F1F8B46DB238B31016EB5B39C368390133B5CC76A6ABB779105953", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051391, "uuid": "435fdff5-5029-4c8d-a62f-9a10c287ad9b", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051391, "uuid": "b7e15760-09c8-4b73-909f-927f486aa638", "value": "98304:4YhQje8LPlsg2rHCihheOyllbqR1v3a84J5UYBSdThneZ4kl:Mj7tt2rHnh6lsi84JNBolI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737051391, "uuid": "575e2363-61d7-47e3-a746-54c4e1aed7b5", "value": 3677294, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051391, "uuid": "a6805b76-2888-43df-846b-7362406fb253", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d7ef13d-d436-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737051650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051650, "uuid": "4c9bce2b-99af-4e9a-80c3-d516d668d1fe", "comment": "Malware payload", "value": "5995494ed72a8a8190ccc231a479282d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051650, "uuid": "1233b8c8-a6e5-439b-b3ac-138dde9e3948", "comment": "Malware payload", "value": "55dcda854a4cc8027ac2095e186643582021d2f903946b18acbdb9833408bf1e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051650, "uuid": "6cbf3a19-5296-4551-bda3-6c4a8d13bd90", "value": "T1A4E47C3A8517BEBE3A2E3E8C50083D491C686ED74768D558EFC9A536B2C9280DD7C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051650, "uuid": "072c1aa0-5785-4241-b7ac-4b42446290c0", "value": "12288:RY2Hsquh5a/bhCgWqiWHIcWzMkVjkMAkxZ7wyz3Zm2u:GYsqWHV5jkMZUyzE2u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737051650, "uuid": "86fa1845-7a93-4f91-8b28-83926b058f58", "value": 673667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051650, "uuid": "9419cdac-4185-4387-9cdc-8e44d94932eb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a74c01e0-d436-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737051667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051667, "uuid": "c9062de4-4f9a-4531-8027-b7a1a290fe62", "comment": "Malware payload", "value": "627d738c7365ddc76fe45472ddfc89b0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051667, "uuid": "2311128e-9b2d-43c0-abd4-9f6038e16118", "comment": "Malware payload", "value": "9fdddc791c9587308ebde319912a86f94a1172de8a6454ce0019f093fefc7504", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051667, "uuid": "8d82f0c7-0234-427f-bd66-ac0da7a34460", "value": "T11FA32A325213FCCF6B7F2E85E8002E911CB8A57B8F459558FACA06B944DA120DE7DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051667, "uuid": "6acbdb30-36c3-4dbc-8695-1032a644ab50", "value": "3072:jtLYs+9wejFP4PemI4esHzPKYo5bR7UHPE8w6Df++:jFYs+SejFP4PemI4esHzPKYo5baHs8td", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737051667, "uuid": "34a6d0e1-0c70-41f6-b2c8-590a6c6d3b76", "value": 98863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051667, "uuid": "17103b84-9c71-41ac-abfa-215a329b3222", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c544ccfa-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052146, "uuid": "61eb1285-b5b6-4e77-9670-fe8676729ff4", "comment": "Malware payload (Mirai)", "value": "1d0ddde7101dfe96c6e04cc8434118cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052146, "uuid": "cdedf8b0-168e-4b2a-b782-2921ab455b59", "comment": "Malware payload (Mirai)", "value": "6fd5e4f493ce4e22e17fd4508bba4765a186ffd7afcd8ab8335548f060dbcbce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "923e315d-82c7-4ee7-81e7-a5f86f4cf376", "value": "T166539D76E42A6A80C5450834A0B88EB51FA3B1C0835B6EFB19DDC7B56047EBCF549F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "39cb2f2b-87d9-41ca-bd94-3ccc97224193", "value": "1536:KFpONff0AHC9s/mRP2by2EXfTlcS9GKGNZfkSRYCZrehb:KFYN8AHC9s/mRP2by2EX7lRnGgSRYhhb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052146, "uuid": "3b48ba65-c1ee-478e-9a61-755af58eccd0", "value": 64324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "f641cde6-bb02-474e-b62a-605df6af84e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5451055-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052146, "uuid": "d5e7d77d-dea1-4cd3-b9ad-3917d22b9be9", "comment": "Malware payload (Mirai)", "value": "aa623a7ded9c8f3e0703637779e97887", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052146, "uuid": "0433c069-3926-44e9-bda9-e93f813ce5ff", "comment": "Malware payload (Mirai)", "value": "99be4837165eee0bbec6ad073cfcf8de68020c01fefabc4549848839139b3a84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "9e559bfb-49b7-433b-b2dd-929937ad2484", "value": "T19AE33C46F6414A13C4D61776FADF4249332297A4A3DB73069928BFF43F8279E0E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "cd5e77ec-08b9-4e7a-b637-e25c3ec5e0bc", "value": "3072:8p3NgmkftmD6SdrDaDmbBjH/WVSGjU8bvmSh7uM/9KDBA:8p3Ngr8DXXaDmbBjH+VAMmShaM/96y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052146, "uuid": "2bfebee1-a396-41f8-b162-50c965a907fb", "value": 155840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "972091e8-dd94-4ebe-9a22-5b8465a70cfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5463459-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052146, "uuid": "3f91656a-7882-4c43-b01b-af197fc6e11c", "comment": "Malware payload (Mirai)", "value": "c7d3bc034797857a0e37de8f60140e34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052146, "uuid": "e3982a7c-22b4-4773-9b5e-a3616e74e5fc", "comment": "Malware payload (Mirai)", "value": "6e40e0e8f7a02ab8460d06d4019c9c118ed06dc4c042f8884238a90d78b4b55e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "c71d60a8-cc54-469d-835d-422fcfb34808", "value": "T1C8833B56F8814E12C5D5127AFA6E018E332327F8E3DEB2129D206F30778696B0E77D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "5e116eb1-e6fa-4832-b56e-2b719f8c8372", "value": "1536:jCnjrsq4n1Mwm0BTHfNDpeH94frgI3IebSadouLzgI/iS0Ln8f0ebT5uYv2:EOWwV9fju94z99Sad4Ln8f0ebTsw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052146, "uuid": "9c1eba42-4713-48cf-b279-2168e6c0127e", "value": 84184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052146, "uuid": "f5239f43-d9f3-4b6f-88bf-673f6bfdbf36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c54c6065-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "69ecf2e5-ebec-4546-b52f-573b9ef02147", "comment": "Malware payload (Mirai)", "value": "27633f02eabd3f496e801da3f5a3e4ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "e87d23ba-7a55-4181-b12c-c2678b90cd04", "comment": "Malware payload (Mirai)", "value": "ba063217aa0569cfcbad4f58dce9389b02491e84bb7afd3578c528aea4a732a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "3b1b102e-b6f4-400f-b2c4-ed3b972cce2e", "value": "T1E893C709BF610FB7D85BDC3706A91B05248C695B22B47F3AB534D528B64B24F26E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "5f7e56b0-27a9-4a55-885f-536e3e7ae22e", "value": "1536:IIdgIHlIodXYtNjG7M/eNLNnStqZIzAFS4ZZ1hV6I5GPCr:IIdgIHlIo2mLNStqZPF7ZLI6r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052147, "uuid": "bb62b1c3-fc25-4574-977d-ccd15f92a7ae", "value": 97100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "2c0ddbe9-522a-4607-b627-b6306f864ecc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c551bb1b-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "578ca12c-378b-4b47-9a66-14ebfff599d2", "comment": "Malware payload (Mirai)", "value": "8fba2f76e1c65108d3fb582cf1472693", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "12b6ccf7-7dd2-4246-b8fa-f0ec5fc44558", "comment": "Malware payload (Mirai)", "value": "4e0d3ca48a047b78303580fd9f38f8eaa520e604171c0587cb95d3336f4af17b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "ca1271e4-5a79-41e5-abf1-346bfbd0b600", "value": "T12D634B02B3580D03C5A319B0253F5BE097BEE9D022E0F689291F9BAA5A71E775185F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "4232204a-2f5b-4fb5-a90d-9c0e545bd173", "value": "768:utRoRvR1mliRcwy4DrghzckI8/y/CjuyrB0oxulSJwV9w1VHcjU3lpDuSIFxGtOO:2IhRt0/vSui0u0w7w78g3lp1MGs6L5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052147, "uuid": "4bb78248-6120-4c87-b922-12b88cc3b9b0", "value": 71128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "129412d9-37ca-4905-a686-13a8fc30f54a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c553ab19-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "5397619b-ef61-4e52-89a3-771540d97637", "comment": "Malware payload (Mirai)", "value": "f91e3c14222bfd58128d27ed3f60b184", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "2e7b9b5a-44fe-4f55-bc7b-456708c94c1e", "comment": "Malware payload (Mirai)", "value": "047279e4e9343f2920eec8759dfc329d56e5bd32c37a27d8fe618d320c5ba885", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "d9e40425-de59-4da5-a968-2c5bb514d598", "value": "T101733A45B9815A13C6D1127BFAAE01CD372523E8E3DE7207DE216F21379682F0D67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "9b6d1b2d-bef3-442f-8069-b3a8fd053244", "value": "1536:ijdRLkyeqmpbUHmgy9ft5/VZrW4fmqdcvpWbdvrb:ijd+5F5/VPfm5B8rb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052147, "uuid": "5e7c7d20-6e02-42b8-90dd-00db87196260", "value": 75848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "623cbc75-cf8e-4156-8458-8afae09786ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5573340-d437-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737052147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "10756b0b-4abd-4199-b821-1517125eec06", "comment": "Malware payload (Mirai)", "value": "01053082f5f4c612bd1b0c5726eca38d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "b85f25f7-fb6c-4145-9806-978afa9e9b78", "comment": "Malware payload (Mirai)", "value": "ab0f4cf83c615a9b515eeca87795c0f5cfee702baf87067036b7aca025bd845c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "33b9f9ad-0bc2-4d03-961f-0aad0319825a", "value": "T1DA733A21B5361A17C4E4687A21F78B15B2F157DE25E8C60E3E720E9EFF316803943A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "e7fcb5a9-bd2e-4bf5-b103-5baece87d414", "value": "1536:OYiPyS9A6hjC+sByK7+iz3u75bSstjirK:7uhju7RuVbScirK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052147, "uuid": "c7d49453-4002-4656-b28f-1e1fad8150fb", "value": 75136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052147, "uuid": "7d2d673d-364e-49ee-97e3-7e998cf39216", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9065d7d-d438-11ef-856f-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1737052529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052529, "uuid": "03af8151-6705-4917-8251-666706e38afd", "comment": "Malware payload (AsyncRAT)", "value": "30a6dc955777e780bf20ab134d34c34d", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052529, "uuid": "51b4cc96-9562-4375-aab9-5b1917bded2b", "comment": "Malware payload (AsyncRAT)", "value": "9f15d0891d2a1787b99e1cc15981f0e6b8193a68e4b415d1a054aa4ccae688ea", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052529, "uuid": "e9e3866a-74ae-4a4c-9278-ff103bf0fd94", "value": "T117233AF10763AD8F8B270F01E80C1212DCA9EC9B32A984AEBF4549DA5FF55189D74C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052529, "uuid": "6af8621e-3f61-4ac1-8f03-e1ffc6f8c763", "value": "768:YhaxYrju5tc7CUl+CdRdleEWCeDIOj2Utk17yyfAuHZcfp0qJPWzjoJb+VA:YhaxY37RMoDoCeVj2UtYAuHMp0KP+jo9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052529, "uuid": "24ff0b65-82b5-4870-9690-218e8f827152", "value": 49152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052529, "uuid": "0620efb2-ce4f-4e70-bd56-5522a72f177b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ef97e98-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737052897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052897, "uuid": "9e291e99-20af-4241-b694-0e80c7b24662", "comment": "Malware payload", "value": "16fc10285bfb8f94ebad4ced5761f6ec", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052897, "uuid": "b27b709c-e78b-4916-9b2c-887891805a20", "comment": "Malware payload", "value": "ee2599452b1f5e8ec41649e07cc3dd4af7470ebcfa61c5babb0cddc8a3c9403f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052897, "uuid": "2428d31d-86ec-428b-ac3f-f42f588308d4", "value": "F47312E017B5178C1272E8393BDD305F9124323A32AA39606D97518EF957703B6B2DBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052897, "uuid": "e6357799-99ec-459c-8f42-499969f07503", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBC:8D+CAXFYQChaAUk5ljnQssI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737052897, "uuid": "8cb0a1ab-3976-4c4b-a4d3-8d394a545ccd", "value": 77380, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737053465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053465, "uuid": "8dc43a0d-4cda-4224-bb36-1523cfc4fd56", "comment": "Malware payload", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053465, "uuid": "5a9313d0-c900-4811-bcfe-47c7410534e5", "comment": "Malware payload", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053465, "uuid": "292bbdeb-268d-4557-a8ee-099058e03c82", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053465, "uuid": "a1706b59-04a5-47c7-9e88-00a10c6c9819", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737053465, "uuid": "d7577bd6-a3e2-43cf-b4f6-55cd7d5bfc86", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "547617f9-d43b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737053675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053675, "uuid": "769d7478-0048-490f-9015-f7eb9fb7afa8", "comment": "Malware payload", "value": "7ed7e1bd76ba08ef520cc0890ef1792f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053675, "uuid": "38aa500e-3882-4198-821f-35f21c8049d9", "comment": "Malware payload", "value": "ad38372f4c4684d7ef86609c93c805cabb9e0cd4a4558a0e3f23d9c206042ea4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053675, "uuid": "d3518898-53bc-41b8-9950-8decba81d540", "value": "T189A33905B7180A87F1A31DF02F3F2BF2C7EA8E9121B46049684FF68596B1E725446E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053675, "uuid": "4e9a2e24-5001-4d12-b0d0-abdfc0a15e6b", "value": "1536:ZaDKfMB/N0e31WlFTS3aPuttkg7zB0M1WjtH3SgfZxeO4eQeTp9U3DCbRHf0AEnU:r0BVpFWlFmt6uYjtXSReVEnoB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737053675, "uuid": "743f7838-9d17-4fcd-af24-68e1647e736a", "value": 99744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053675, "uuid": "c1cf1bb8-9f31-412e-a754-117f27b5bb57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "977e136c-d43d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737054647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054647, "uuid": "e368999a-20a4-4e09-9696-38891e250558", "comment": "Malware payload", "value": "d7fb82c49a8117aec1da2c838bfee6f2", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054647, "uuid": "f60e5505-07a1-4f0a-a4d5-069aca72e6b4", "comment": "Malware payload", "value": "32a294c7bf0db6fc4957bd940ff79f6ab6623f6b049454ab4c05a45006138fa2", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054647, "uuid": "d11d5b8b-da79-45b8-ad21-ff9c8724150f", "value": "T13585332E1F858A2ADF4FE337B8BB05A530E4659612139927445F33F20B736B893C75", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054647, "uuid": "37ea26c6-578f-49cb-827e-e92a08657733", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054647, "uuid": "04c1cb43-4e9d-4e4e-be8b-a8e8d458bd02", "value": "24576:RNzr0PZilEbupmD3HK+cIm0KSrpRBlDZJKHB/stRQTHF8fepEpyANjPIgJQLTrSL:RNPyilwD3xKSflDZJqmQ76CA1ggkrs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737054647, "uuid": "e57fc6a5-77ed-440e-b183-3b1493e932da", "value": 1861120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054647, "uuid": "376dc467-9476-449c-b9f4-8edd0c27cd2f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "558549be-d443-11ef-856f-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1737057113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057113, "uuid": "524e8dae-9864-4fd6-814b-ff5252038f19", "comment": "Malware payload (Adware.Generic)", "value": "cf8e360ea5f29a1af133e36034803649", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057113, "uuid": "3ce8a1a5-ace7-4284-b2d5-315b46e7e784", "comment": "Malware payload (Adware.Generic)", "value": "e150c0a20b3eb55e43b50b5a1fa5eb7203c359faf1f8297cc475cdbd7b1e149f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057113, "uuid": "736921bc-42cb-48f2-8e56-2649374daed1", "value": "T1EFF5331392875E30DC2AC6F4DD3F600DEA37BA9B1CB7418432CCC6DE55129AA5069B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057113, "uuid": "becf5d4e-5cda-41d4-966d-60158aaad3d3", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057113, "uuid": "e8843073-e8c7-4de2-bbef-42cd98496ed1", "value": "49152:e95SxIoIIfYxF6jkOFYILZFPRMIl7bBIu/wU0fFKKwZojK8r1U4kl:45EpI+YGXLZpGIBp/09KKc8rm4kl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737057113, "uuid": "feeb451b-8243-4319-898f-675425d98be6", "value": 3641901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057113, "uuid": "4be5e010-d5f5-4d47-8ba5-b38e3239cf65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d10c193d-d444-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737057750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057750, "uuid": "c29f1be1-7683-4e97-b922-e6af37e0d2bc", "comment": "Malware payload (Xorbot)", "value": "e556a119b81197f60165c91a607b8e54", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057750, "uuid": "58ff5e13-40b8-4f8c-acc3-79756cfe5e32", "comment": "Malware payload (Xorbot)", "value": "8ecd9c935570febf28b76484ba72fe0aa65db96b72b7ca01f4e38a1564b6b616", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057750, "uuid": "c98e055b-ba37-4467-92c6-2d01d82dc051", "value": "T19022AFCA23859138C6C15A845675FA86F10BD4C1ECA33FD8C0CF9BE96149F99F889B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057750, "uuid": "529907bd-8e08-46e4-beb5-5aba685df777", "value": "192:lC++/XYKPgf+QGGG2G2GTGnG4rGGG2G2GTGnG5C++/X5:dKPc+TRhhaGdRhhaGw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737057750, "uuid": "fb508a2c-08f8-4470-8fd4-12781c793d4e", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057750, "uuid": "9407f996-ed91-4aa0-8b08-9c66f51b3772", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84448d33-d445-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737058050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058050, "uuid": "51ea3d03-7d04-4321-8708-5e5ae7b57caa", "comment": "Malware payload (Mirai)", "value": "6327d00e2d96c99ac15af1b6b00d2818", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058050, "uuid": "fde1f81f-ce41-4a21-88fa-d40ae9c3fc7d", "comment": "Malware payload (Mirai)", "value": "22d5ae9cbdac21c8e07fa65c31949b215d7d459e6b74ef0f62024ad06754d4a8", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058050, "uuid": "fd33b44e-64a3-4820-9bf5-e2fcc43b3092", "value": "T1D9B2D0ADD0EC3409CD8D6C3A769F93510E2C91D4B5AA9F6E8350CD9C6ABE948B08A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058050, "uuid": "6d8716ce-5f5f-4f3e-95e2-fe237ce26616", "value": "768:c4rQlS07dEv0UXqUhvQE+CXmwsJ6MywZByOMcZq8Wvw:BQlS07FUXqIYSXmwsAJOHq6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737058050, "uuid": "976ae0db-1d5e-4a30-8702-b023d1afbcf7", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058050, "uuid": "29380f07-dc25-4643-ad42-f1f3954bdbd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "434a4f34-d447-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737058800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058800, "uuid": "8538426b-4a61-4b0d-bafd-091c8e6c3ec6", "comment": "Malware payload (Xorbot)", "value": "26039a76eabbf3972e4c26d77e36f314", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058800, "uuid": "f264dac4-eaa3-4713-a90d-e28fcb8e1b99", "comment": "Malware payload (Xorbot)", "value": "0146bbef5ad59f908c4b25f499e8290d1ac80abcf751450ccb5b615d465d8b50", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058800, "uuid": "fcc5ed66-be3c-44d0-b7b1-9be5e9cb8b99", "value": "T1A422DDC82249013949F19F4A71796DE6590E6C405CD95E2984CE37EC890EFFEB0CAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058800, "uuid": "c55d4f5b-3f08-4936-8114-95959a7b0f22", "value": "192:VVp+/XYHWjjbKGtGdG2GTGnG96GtGdG2GTGnGdVp+/XD:LHWnbdk0haGDk0haGE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737058800, "uuid": "e04f4390-0b50-424e-9f2a-baffa26d891f", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058800, "uuid": "dd698425-f0bc-419e-a6d1-ed107ed53a5f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737058865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058865, "uuid": "422f8fa9-c146-48e9-b9d1-9abaca116091", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058865, "uuid": "ee2e0f75-a389-4aa3-9190-61aa22dc8e5d", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058865, "uuid": "82626fa5-d493-4b2d-af63-632284959d06", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058865, "uuid": "554e840c-a7b4-4bb6-bbf3-60bc32a75bda", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737058865, "uuid": "05ec98d2-f50e-42f2-a3a9-2dc3bd8b2c26", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "323cd785-d448-11ef-856f-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1737059201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059201, "uuid": "998452fb-a5db-4325-8d8d-535e02f5aa24", "comment": "Malware payload (LummaStealer)", "value": "340fbcfecbef08a2c93071533ebfb90c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059201, "uuid": "b3ee0545-845e-45cd-81ce-c493f282bf96", "comment": "Malware payload (LummaStealer)", "value": "7cb78427d5c49cf1258f6f12edf246b70e8a0cca0e7320783e0c9652451b25ad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059201, "uuid": "d348dc3e-88f6-4a61-a462-bec05aa290e2", "value": "T131A4AF03A3917E52E9664B728E1ED7F8775EF6644E5D3B6622199F2F09B01B2C2733", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059201, "uuid": "1a9581e2-a20b-4d3f-bf16-2682becbac68", "value": "6f17026e523e31079da5fa4c89884488", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059201, "uuid": "d96f12a6-f7af-453b-846e-c4dc99e3a875", "value": "6144:AuKOqLDjinLmaIJ7f6BwK7uHYhrgBwel1KaK32DsZpSAWGu7yESM39:AhXjinLmffbK7u4tuwiKzXhW1aMt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737059201, "uuid": "e140ecd4-e81d-46c8-aef5-95b30ea4a00f", "value": 468480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059201, "uuid": "f4ad59cc-5892-4dcc-9550-b6923f219bd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2422052-d448-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737059389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059389, "uuid": "76083f2c-871b-4eb7-a0ba-b6288a77a04d", "comment": "Malware payload", "value": "520badb2fd3a9406b5045171324e5ef7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059389, "uuid": "ed21ebf2-2e40-4367-98e4-ecb221974b16", "comment": "Malware payload", "value": "4e1648953dfd6684c2a65f6771f19a66a23003bc159c6970416e535b46bbaa6e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059389, "uuid": "e9a0e156-c250-48c8-afcb-56b5c8af277b", "value": "T175949E03E3927E52E9564B328E1ED6F8775EF5648E597B6E22199F2F05B00B1C2733", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059389, "uuid": "22434188-43e2-4c09-a419-a05dae5ed3ef", "value": "6f17026e523e31079da5fa4c89884488", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059389, "uuid": "753aee44-5612-4d7e-b8d9-0b051e7e78dd", "value": "6144:GSUpItLLBb81mJUq2eB4vfsTWxUzocTOejhXbzaQxzm80CYPWaBbSIT39:GS5hp81mJNWf/2kcTOSb2/8oRTt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737059389, "uuid": "e5bfac9c-a3ae-4bfc-9859-4861cd580633", "value": 413696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059389, "uuid": "8f0e9e9b-2778-45ac-b8c2-821ecd5aa194", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d89a565-d449-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737059811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059811, "uuid": "a8586a4d-a8a1-41f5-b5a2-b2315a7b0b78", "comment": "Malware payload", "value": "4d116fd2a7210450a728bbc6a0f63ba2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059811, "uuid": "f7ac83a4-608d-45de-9a94-46cff75162f9", "comment": "Malware payload", "value": "2336aad631344fa6fd5fec2cef5b1012d526fd2fc940c937d88d93e79f211089", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059811, "uuid": "364543d1-67d1-4916-9de6-54e2bb131f86", "value": "T1644401D48F45700DD60E5B21B19BA0E7B59ABFAB474A2E4FE6A281DD6305F1B2F410", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059811, "uuid": "9d47dba2-3f01-4ab5-883a-99e0c381cadf", "value": "6144:XkMVbphjkeySsWrvRdhI1QNdnKJ5abJAtmn173Cm8xcCYcD:XtbpRkeySpvRtNoJsbutmn173Cm8qTg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737059811, "uuid": "b9abb014-df22-4643-a69e-00d5b6ed405d", "value": 278089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059811, "uuid": "72b153bf-8946-47f7-9042-ab5950180b12", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13e51fb0-d44a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737060009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060009, "uuid": "8ba6462d-9ab8-40ea-b9d3-03591370d4f5", "comment": "Malware payload", "value": "e1e689abb02c29ebe905afbc5af8d6c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060009, "uuid": "79d8aca9-0d5a-485e-8d71-c35eba6fc632", "comment": "Malware payload", "value": "7b7b9993be25fb0e79ee9164faed9c9dbbf810eeb34d790868149071043c6527", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060009, "uuid": "f18a421a-2fbc-4cff-a2fd-397d94abe2ec", "value": "T116C79D0633E601A2E5B3A1798A9B4103E772B4575730CBDB718C43542FABFF49A7A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060009, "uuid": "733044f5-8cce-4420-ba6d-dbe43dc06543", "value": "4d0fb8dc9ee470058274f448bebbb85f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060009, "uuid": "7ea5d81d-e13b-484d-b394-fde0af4c6304", "value": "393216:s1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfe:sMguj8Q4VfvmqFTrYyD8c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737060009, "uuid": "6fd9e97e-3254-4ecf-9da2-bf1da9d1a325", "value": 53683088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060009, "uuid": "8c0c04b3-8914-439c-8b1b-cedd232cc799", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737061055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061055, "uuid": "17bf8698-8c74-4914-b14d-ff601d595179", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061055, "uuid": "3978f453-d568-4bee-a6dd-160ff232cca2", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061055, "uuid": "c14c94a0-cc86-4aa3-963c-d94034bfaafb", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061055, "uuid": "a39281a0-965b-4ebe-9260-afd97a250754", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737061055, "uuid": "da4ce06b-966d-4173-ab71-5b517246340d", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98801fb8-d44e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737061950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061950, "uuid": "63ea1234-b08c-4040-8674-675a9e634e23", "comment": "Malware payload", "value": "23685327322347cac090ee13d55bd5d5", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061950, "uuid": "e4b8cd37-ded2-4fa2-8b6f-47d58064694a", "comment": "Malware payload", "value": "e957a659d3d0f23c658343a6a2327ab60aa693d98a3a8e5f149d1a70b979a6f2", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061950, "uuid": "67bc4338-e398-4690-908f-1e3eb252c72b", "value": "T1C38533192ACB66ECCD2E923430FE2101B163152B20D96EB87BD229D6C2DF2D51FF51", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061950, "uuid": "1858226c-aa57-4235-ad4e-c36b543ec47d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061950, "uuid": "d0b852ab-9526-4db6-8b01-e9a0047039f8", "value": "49152:Qi0NslH+kqnZ2TQ4VZNxtokRJspbERhUHO+:a+H+PZ8DabEfUHO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737061950, "uuid": "45b9a070-e54b-433d-8938-34d8b79df0f1", "value": 1859584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061950, "uuid": "94385e37-193a-4ec1-a9d8-383680058a5b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a20f8cd6-d44e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737061966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061966, "uuid": "2ff0da22-6f40-48e8-904a-d224c43c9236", "comment": "Malware payload", "value": "50aab3786e0d6549fb407f196b82a578", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061966, "uuid": "bbb8e87b-77e7-4ef4-8168-b201e898581b", "comment": "Malware payload", "value": "d19efe47a232153ce81aa6bdc2cde92dad6cdff602fb8d6a67d4127909ec46f9", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061966, "uuid": "9da9c9e9-8413-48b8-b506-384f8c2fee50", "value": "T11895339C9B442E39F63923BE85DC57DDAF7543028E884815AEEBC37BC1276AC921D4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061966, "uuid": "1db12375-d141-4abb-b3c9-f6a1be454b74", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061966, "uuid": "33822029-ab0c-4e8a-84f9-473c06b78911", "value": "49152:JbFIGZo6/pE78B/WT4rrATmuxraq31ydNqayFvvVaMm:Jh1ZHE78oT4mDOqayVvV1m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737061966, "uuid": "0ea4f593-3beb-48dc-98ea-59eed836ba9c", "value": 1898496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061966, "uuid": "28f8f3d0-fda8-445e-8062-96047d54e3b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0b7ec6d-d28b-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737062189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062189, "uuid": "816c80ec-e02b-4dcc-b6f2-9ab8a155e032", "comment": "Malware payload (Mirai)", "value": "944b6d159ab3e092bd836ab50ace5726", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062189, "uuid": "e4c67279-84d0-4410-bae0-7e43c8e64865", "comment": "Malware payload (Mirai)", "value": "58e3cfde1874c8b530ff43057d1eeb2e5daa7aa25b75682c6e09bf3b5921b27c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062189, "uuid": "43b6d5fe-b49a-42e6-b1b5-2b6cdb90899c", "value": "T1EDE32ACBF800DEBDF80AE73B48130805B130BBA155925E376257797FED3A1990967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062189, "uuid": "b5dead0b-ceb4-4019-a0ad-b1ec84eb0d02", "value": "3072:6SyFEZIXJ5aWVoTcVUmsOMMNFSkXtkEEVCjbiYL13cRAyOpF1f:jLIZsO/NI6tkEzL5yOf1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737062189, "uuid": "09cf397d-ab1c-4d72-bda0-1b10d981c8c7", "value": 153984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062189, "uuid": "6576e7cf-eec5-4dfa-a3cb-8851605c2467", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737062508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062508, "uuid": "7aa0a7e4-0024-40db-9b13-0d156a18f8fd", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062508, "uuid": "68d5dbc0-43c4-4867-abec-19e081e2b6e6", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062508, "uuid": "6ee13b85-dea6-4647-89f7-3534cf3b42c5", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062508, "uuid": "451f3693-e691-4334-8db2-e449c2da1897", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737062508, "uuid": "795eaecf-629e-409c-8512-01e491e2c67d", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04671d94-d450-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737062560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062560, "uuid": "7cff1842-076e-44da-a9e4-b2b7cda3e6ac", "comment": "Malware payload (Mirai)", "value": "21050f039ced1d5cb275a96686ddb78a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062560, "uuid": "9a746e1d-6b19-4d44-82ae-eeeea854fc46", "comment": "Malware payload (Mirai)", "value": "34e360b55ebd8288d2f8c8dd550a73e84e045c4eac435bcfa29f5fd20bb1c159", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062560, "uuid": "e0b7694f-ef1b-40bd-83ab-52bc2e0483e0", "value": "T1DFD2E1BC070630EBE6B596B91BE03B9968312BCBF983780610C6E4635E5E1A43487D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062560, "uuid": "12b443a8-bc79-43a0-958d-9356b3a437dc", "value": "768:WKgKY6U6sL4Y8BJcwwXQ97Q4urON1cESH5dD0JgGlzDpbuR1JoT:WTWsk7BmwwXQ9xurwc95dDsVJuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737062560, "uuid": "53ae3c3d-6cf1-446b-ba1c-ece5f54aa5f3", "value": 28588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062560, "uuid": "cf81128f-29b7-4751-b6d7-ad07dabb6872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5f8ccdd-d450-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737062966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062966, "uuid": "fc982c1d-7c7a-4f7d-880d-d8c4c3d63629", "comment": "Malware payload (Mirai)", "value": "6f0f418a4f4b733247810252748e50a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062966, "uuid": "c94c18f5-1352-4268-92ca-ad2cb6cba437", "comment": "Malware payload (Mirai)", "value": "4a67047d31cf493ecfa13330b96fbccb8d2dd2c6c074667328e97ac899873b63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062966, "uuid": "3367a817-0af5-4da1-8319-885021e2f7d6", "value": "T1B1A2C03007AF9C76C9798A35C9BD4B4677964AFC90F732DA2A2013E0764534E36B15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062966, "uuid": "a70ecbcb-a9b9-412e-8f67-c2891308e9bb", "value": "384:u9TjOj3d4n4v0ry/IMmCHvITkLJcC0yGrYsKC/oHH901KH1MMlDxhymdGUop5hKi:MTjOjW4v0rywhCH0kLJcC0xYsK795r9K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737062966, "uuid": "01ee33e5-0763-47f9-b954-e69606b65056", "value": 23300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062966, "uuid": "1af50bbc-d919-418e-a7db-65822d832bda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39cb3a85-d286-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737063374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063374, "uuid": "29adc660-ee49-4251-99d4-4c7f2f5c5b0a", "comment": "Malware payload (Mirai)", "value": "68690224ffc651c6d8d5164911c6a693", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063374, "uuid": "eb46d188-4da7-4645-be53-f9875b5c6875", "comment": "Malware payload (Mirai)", "value": "3754798b14b9e8071ea98a22e0fc58afcc524dcf03d751258fd25f7efac34145", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063374, "uuid": "6a98d216-f963-40ee-9607-ee239a73aafb", "value": "T18643026E324D1223EAFAD6F0098E03A5BD661F50D893BE8D9CA4F01755802EC5D89F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063374, "uuid": "ffe50ec1-4eaa-4be4-9478-136d0c52eea5", "value": "1536:RBF+eGD0v0wj58djGFPNB+cwJZ0GpzDY+nbPUtEVGv:H4F0v0wj5GEWRNFDY+b2EVg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737063374, "uuid": "0d1a8968-9ac1-4cea-a132-1255725df708", "value": 57312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063374, "uuid": "6d4a63b6-8bc3-4662-9692-2a58536680d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24ec4153-d452-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737063474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063474, "uuid": "6039b76c-a22d-4adf-8e26-ea77e0ed2db0", "comment": "Malware payload (Xorbot)", "value": "36435f706257139754eafb6d4cfe15ba", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063474, "uuid": "764d3d3e-a923-47fb-b815-0e4a3e609a0a", "comment": "Malware payload (Xorbot)", "value": "f0290b7beca7a7ee9e545543f5dba4a680b92aaf61fcc339148a776389a10898", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063474, "uuid": "aa91a3e0-1ea6-45b3-a3a0-95869b516674", "value": "T1E2220DCC12C61F3A45856E4861B5FD26614B84C0DFD73A84888F2FA9294DF89FA49F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063474, "uuid": "1554314d-3e70-4eec-9482-7b6694a70060", "value": "192:Zui+/XYCR4T8YG2GmG2GTGnG09G2GmG2GTGnGFui+/XP:rCRc8rhxhaGhhxhaGE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737063474, "uuid": "ba84f32e-25c3-49fb-9895-d0b96b7bc959", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063474, "uuid": "863e3e79-45bb-4a2b-a1e5-2efc410ffdc3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a692461a-d44e-11ef-856f-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737063497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063497, "uuid": "c96d957b-aa59-4505-97b3-f2b6bf866ce4", "comment": "Malware payload (Healer)", "value": "502f17df758b36ce8b0eeea597faf84b", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063497, "uuid": "8fc411ed-31f7-4d4a-bf9a-3ccd11feacc2", "comment": "Malware payload (Healer)", "value": "67142ee5e8884b60f904fe3477d939332e5fa3fbc2ae3c5fc66ea73a0aec1fd8", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063497, "uuid": "a48b6d0c-f9ba-4c08-a02f-56af60c6a1b4", "value": "T13D8533110AF7AABCDCDCF4B5B162C275B92F2641D5F312C8B688FA35283483235A5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063497, "uuid": "b079e10f-2da1-4608-8bea-2a0f365b76fd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063497, "uuid": "9917ea2f-6b54-45be-b8c3-574836d7177d", "value": "49152:aX27781VR+me4+dCLcwf88hQlPD5I+Y9F:CA6VR+me38L9h0D5P0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737063497, "uuid": "eb3c361d-665e-4fc4-84f7-1189787d8f57", "value": 1741312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063497, "uuid": "95d9f028-a48a-4293-88d2-12c80d0e57fa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4daf4721-d453-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737063972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063972, "uuid": "5d22fa4f-f062-4e2f-8271-a214342ee289", "comment": "Malware payload (Mirai)", "value": "4846942ed97722d05454a0634e1388c8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063972, "uuid": "848d7c01-35cc-49fe-b57d-3b0283c312c1", "comment": "Malware payload (Mirai)", "value": "5095e910c6910ddec7f330468129ba8c7d4ae62e335516d7ccb9bf82e2b5d1c2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063972, "uuid": "2b4d7aac-5bfe-416f-8da3-e604553f56db", "value": "T184933E21767E0B17C5E0A17991F3922BF2FA47892438C60FBE714E4DBB4996032536", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063972, "uuid": "8ba90904-9263-48ba-9e63-4df1e61a8bcb", "value": "1536:NDAfBn5iHNel4e0COWHqolIAFErGOB/byHpeuNRWjV5yIZAUcB3eeA+Hl:xAfSHNm10aqoeAEIHoIWjWOAP0+Hl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737063972, "uuid": "9b0ce4a2-5741-44ca-88e1-bab67d5af9a3", "value": 96660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063972, "uuid": "9502c3a5-9e01-4a8b-a33a-684cb9affb34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adf0a4a8-d453-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737064133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064133, "uuid": "d0140556-e2cd-4928-b012-2292b3b9a5b7", "comment": "Malware payload", "value": "1669ef82f10a0af755fb49716a165d67", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064133, "uuid": "558cb1fd-fe1f-4272-a48a-cd8f9c4ce26d", "comment": "Malware payload", "value": "05dbcc70f1f8c74b32432505959128d6da0c9384c1b726c9838d649a34022095", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064133, "uuid": "ab3ff504-4bd9-4325-9ade-ff764bfa2738", "value": "T13D41EDCD3BE26474844D8C4D905E821EB5D9FB9162750A96E0C8F8F6B14098F3AE9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064133, "uuid": "eb3878dc-b6c9-48f7-9279-246751d93af4", "value": "12:TTti/UzTyxRm6CUzT0NIlLKCAUzTVQbK36UHUzTno6CnaKAUzTAuo9UzTWO60UzJ:N0ENIFqK3QX5CBlPBoKA5gQlw6R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064133, "uuid": "07907a08-6ee8-4f66-ba2d-7ce6ee2c26c5", "value": 1903, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064133, "uuid": "69b04aaf-f5f9-43b4-997c-60cec9d5ac80", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b888067-d454-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737064451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "268a278e-3afc-4fef-a25a-8de11aebbbc2", "comment": "Malware payload", "value": "7163fe5f3a7bcfdeec9a07137838012a", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "82af0b12-c3f9-43d7-926b-0fcc93b8fb70", "comment": "Malware payload", "value": "5433726d3912a95552d16b72366eae777f5f34587e1bdaa0c518c5fcbc3d8506", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "bc009838-63bd-4cff-98a2-333a4e638029", "value": "T189A4BF01BAD2C072D57654300C3AE775DEBDBD21283A897BB3D61D57FD30190A63AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "584990a9-a2e3-478b-8248-3d2c4494b764", "value": "e77512f955eaf60ccff45e02d69234de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "baf395f8-01b3-4328-b112-4a9256d2a21b", "value": "12288:z13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQqS:5ak/mBXTV/R0nEF76gFZJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064451, "uuid": "513844af-193a-4444-b5dc-47fe6f0a7190", "value": 493056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "eaa31479-f5f3-4509-af3c-78393424d518", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b94828b-d454-11ef-856f-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1737064451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "a9f05a19-f2f0-4ecc-9677-f578a0872c39", "comment": "Malware payload (RemcosRAT)", "value": "50dd6e5820551b0f7dd7f8b627595213", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "2cf127f6-8d89-421b-bbdb-dde081cedcc1", "comment": "Malware payload (RemcosRAT)", "value": "be92e9c26ecf8e58ed7bac040283aa784cd89bcabb66d583c7a8a916a12dccb5", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "bc5b71a9-910a-4d03-9cfb-d86b07952369", "value": "T1CCA4BF01BAD2C072D57654300C3AE775DEBCBD212839897BB3D61D97FD30190A63AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "ae85ee50-a0a0-44f7-88cd-01c6c126826b", "value": "e77512f955eaf60ccff45e02d69234de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "d1d8f4c4-bade-4f43-b3db-01f88f3b8bd4", "value": "12288:713ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQDS:hak/mBXTV/R0nEF76gFZc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064451, "uuid": "83801954-ae36-4d45-a656-7e7bd591f226", "value": 493056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064451, "uuid": "fec9cb09-a506-4d21-b5f3-d982461b2372", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bc8adcd-d454-11ef-856f-82aee05be84a", "comment": "Malware payload (PrivateLoader)", "timestamp": 1737064452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064452, "uuid": "95ab6d07-95bd-46c6-aa8a-c326a2a858be", "comment": "Malware payload (PrivateLoader)", "value": "6626a89aa5cc47a20e9de81360327a3e", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064452, "uuid": "c2e26aaa-dfd9-4ec0-a094-8ebf30092e73", "comment": "Malware payload (PrivateLoader)", "value": "f9c6e2f4c1be741b973d13b711fe68c71a2245c9908d0345724805f5eff1e2e7", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064452, "uuid": "f7a55d6c-4f18-44d8-9abc-3edbfbdcf0dc", "value": "T136061721E155D483D5A934B4D833DDF16356AD3CE0F1CA23B6AD7D2B3431A92B80D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064452, "uuid": "1c6cbae1-50ea-4b99-9974-da235068573f", "value": "0b4487d41f282d8cf70f19b5be43731e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064452, "uuid": "94f5ab71-07f5-41a9-99b7-1f3c7d96c749", "value": "49152:fT2Wd4IbtCaIZ+SgnCxaC+1R5oWjhRSTp8Z2WTWw/10tte7:SW5QxajvOWM8UWTWw/IU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064452, "uuid": "c316f784-50c9-49b7-88d9-ddb740de9c38", "value": 3689984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064452, "uuid": "bfcb3625-8689-4618-a8e0-f6f9ff7cfe4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d697e5c-d454-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737064481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064481, "uuid": "5f7dc801-1bdc-4156-9666-1c269e452ac3", "comment": "Malware payload", "value": "557401ef9c2dc1c5af9441e015c38db3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064481, "uuid": "cd939a14-5d34-40dd-858f-beeebb9bf45d", "comment": "Malware payload", "value": "79d55475a80f2635c1e56b45b0f9f28834bda1c1828a69fe14b4a47f7175e4be", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064481, "uuid": "8792b748-b037-4f76-91a4-57570d86dc77", "value": "T12E56330662F9C0F9F018E8B5FD6724AA2C33661A173709DCFFC780758896969B17C9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064481, "uuid": "ae09d38d-b774-442e-9c50-cc450e0115b3", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064481, "uuid": "7133c1c5-ad19-4b8f-a4a5-2bc9e41d924f", "value": "98304:ym+HsKyyKs5rO+bvebta+2k1yVUuJDXZECQb0lu52moLKd9Gb4Pgkeo9xT76MOsB:7+Ss5/vEW8b0lu523MgkD9xSm/pBC2T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064481, "uuid": "eda61c8e-5baa-40f8-b7c0-d6a0f27e351a", "value": 6199699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064481, "uuid": "e5284fdf-a7a6-44eb-9051-7cddf441e1c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ed8ed22-d454-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737064511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064511, "uuid": "b82eb306-41a4-4102-9beb-84ffb17d2c2b", "comment": "Malware payload", "value": "6f163d9cd94d4a58ad722301cf9847d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064511, "uuid": "ffb4a24d-e2fc-4e90-8b8c-3ef0c8226ff4", "comment": "Malware payload", "value": "827642649f28e190ac328f026c6c1a332d45b2be4af76bd8f6c8e85838c90b11", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064511, "uuid": "f9b045af-de27-4941-bd4f-5b99cbcd6314", "value": "T1C0461268FAC45D6FFC4A44B680BD33C526DAA84B23C9855CDCB3BE40776719887E20", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064511, "uuid": "e2ae7a12-b4e4-40d7-aa6a-dcf7d5b0445f", "value": "b237ac2118704db9e7609540658f5790", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064511, "uuid": "190f6b43-b940-4378-9f7a-3d59db77c223", "value": "98304:u2748RDvvoNBl+rDPmV92kxuIW3TnT5ZaJuF4jZ7c5kLctQO74jEr2OPSvayLXZD:r481vvIqO7bwBkJuF4jZ45kL5gKvLJjv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064511, "uuid": "b1b90f50-a4f1-476e-a6ce-28ed7fc63286", "value": 5404544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064511, "uuid": "72ef8422-71ba-4342-af14-5243600c4fbb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b058ad34-d454-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737064567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064567, "uuid": "69f7b6f2-f812-4ff5-bb67-143438c8bc21", "comment": "Malware payload", "value": "5d8ca7142f17073e44a042e5988fce1a", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064567, "uuid": "f537f608-96dc-4ec7-90a6-b10c2f12137b", "comment": "Malware payload", "value": "ccbca6daf4e4d71d6d05c7563cbf37de2415b0beccac2405a2bba35fef9d2ae1", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "2ee4e371-06df-4b28-920b-2ef3bd192e2b", "value": "T18242D711F7E8C625F1BB9B344CF2732007B6F95A6836D79E0A94A04E2D71B904963F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "1fbe23dd-3146-4945-9b11-d12fca3a6226", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "cdbd2270-c55c-440a-a419-1cd8d26ffe46", "value": "384:YaVs3Ci04ysrfaBv9BpZTzbQhyxyp5w67j9fe:UbaZHbNX4te", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064567, "uuid": "7920527b-48d0-4b53-bbfc-6445a4735c6b", "value": 12800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "3a2c5486-5ded-4570-a698-4980ce345428", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08be784-d454-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737064567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064567, "uuid": "3b8de30a-bc9f-428c-b176-b3042ea9ad4e", "comment": "Malware payload", "value": "8e3dd64a48207e0bed01c927f1335516", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064567, "uuid": "bd1873db-c18e-4654-9ace-6b1ca3e0382e", "comment": "Malware payload", "value": "57015f166979bb55f694bf27e612d96c6cd630337ca692eab4392f30a4b3ee2a", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "03f1c3cd-1ded-4e7b-a210-7f9046088472", "value": "T1DD42B711F7F8C625F5BBAF344CF26720077AB9566836D74E0A94A04E2D71B804A63F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "3649cbef-7f3f-4c6c-bf99-adc9ae2dc65c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "b5c7736c-beb9-4c36-9641-a92fcffd6698", "value": "384:5Sa9a0MwqcjTaBfzZTzbQhyxyp5yQ7jGVr:5DaaTaFdHbNN+gr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064567, "uuid": "35b7daad-2722-4fc0-a604-2c2934987fc8", "value": 12800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064567, "uuid": "68aac52f-233f-4f13-8bb5-39d99ca0ec15", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3131a684-d28d-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737064701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064701, "uuid": "0c3d31f0-8237-42e4-97d4-5cd77f93fc77", "comment": "Malware payload (Mirai)", "value": "9c0cf500a75080a480c04b5ab4af863a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064701, "uuid": "f71b1021-9cb7-4e46-8449-9011b02c0289", "comment": "Malware payload (Mirai)", "value": "fc81007d717f418b7542faff1bb8a716003b4338809b6b6f1fae407a22e8808e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064701, "uuid": "9df1c58e-1468-4740-aec6-9e9da17d5348", "value": "T1FF03E133BAA908C6C1A610365DDF3FE5250183DF1846A52AC86CF07D5E49FCA7A2D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064701, "uuid": "d864cf43-a70a-4fcb-8801-36d274601ac9", "value": "768:DOHPkureU8rirKpbN5vygzBvykN05/bSPs8eEQX3rXzu3915QnbcuyD7UoUR0:qHMliOFNEgz9FNaiCbXzaEnouy82", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064701, "uuid": "83ac319b-506a-486b-b6b2-de8e919185b2", "value": 38312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064701, "uuid": "6a93fce4-7304-492a-bae7-c9d346a341cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1996ec8e-d286-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737064972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064972, "uuid": "5bc3ff0e-e330-4089-87cf-e651ba9f6a88", "comment": "Malware payload (Mirai)", "value": "5bc43e48f0901f8bd983d197c88b0566", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064972, "uuid": "e2146a30-5f3a-4f0e-8501-34be920a34c1", "comment": "Malware payload (Mirai)", "value": "717575d440f1759e2fa0360ba5454170225aed438e78f45deff748ffbb73c5c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064972, "uuid": "ee969683-f9c3-424b-949d-00f4d7af25ee", "value": "T11533F262E45DCDF6C4A42CF2C430A7C511B379B9D9AB7923B4290D9A9D6084702FEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064972, "uuid": "1ccd112b-92cd-4058-8642-36a6558966ec", "value": "768:bgTGTi/i0Uj9cHgZ+5CGEF8o6I4DQJpR5wcgjBz7FhM/oOLLZx9hPMUQDemdJwcN:yGCI9c35w3N48JP5wcwHhROLLZ5louoF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737064972, "uuid": "a4e761cb-5759-4d35-b30b-5afc2fa8233c", "value": 50956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064972, "uuid": "efacb29c-cbd1-45c3-a881-ff3075c5e547", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f14d966a-d459-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1737066823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066823, "uuid": "4e0c4b0c-0f89-49da-8806-ad5c63b7ea81", "comment": "Malware payload", "value": "78736eeafd4e7ea3e33d99b325034425", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066823, "uuid": "05b4abf0-9ae6-4ff2-9baa-0a63bbbc1ddf", "comment": "Malware payload", "value": "80498aa6b10a63503f3e2303d8d0eb6a89327d29a408c4ec88710facbfdef66a", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066823, "uuid": "695797b4-c2b9-4b45-90b8-097d79bf1e38", "value": "T12B8533A817B13AE5DF157AF40F184AC19A3713E686C433AD78AC053C5ADC33A47E5E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066823, "uuid": "e019c037-8167-4de3-8ea0-ff1d0efea60a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066823, "uuid": "30bb7e3b-3390-4b1a-931e-067356ede6d7", "value": "49152:AdMcG+37xh+AC1z0zwi/tC2buLi8DNJOSNdzTCMsoA:AmBAC1zSQ2buxJOSNdzGRz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737066823, "uuid": "fa297ba1-d8cd-4754-b42a-bf609917680b", "value": 1815552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066823, "uuid": "470c078e-73d1-4ae6-8aea-af979c219627", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737067132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067132, "uuid": "c71bd033-0fd6-4596-8d80-b3dfcb8c4130", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067132, "uuid": "2408454b-57ab-4d90-bb72-d0173971b474", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067132, "uuid": "91c30e66-822f-4c8d-80eb-c6fae3fe5448", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067132, "uuid": "fad01d07-fd91-4846-98ed-a56765695567", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737067132, "uuid": "79e34841-ae64-4824-9191-38d8cbe0cb28", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985608, "uuid": "d952c048-d39c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.39.103:36875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985666, "uuid": "fbb30cb6-d39c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.239.194:57635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985666, "uuid": "fbe1f69e-d39c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.103.92:59357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985785, "uuid": "42f3225d-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.124.138.115:36533/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985788, "uuid": "4494545f-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.24.207:49716/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985815, "uuid": "547afbb0-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.10.128:56831/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985815, "uuid": "547b0016-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.230:11496/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985815, "uuid": "54a57245-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.252:11800/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985825, "uuid": "5acd7b6e-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.240.211.186:36047/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736985966, "uuid": "aee4c5b2-d39d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.166.60.207:19274/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986146, "uuid": "19d8bc59-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.32:59077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986272, "uuid": "64f0645d-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.71.238:47420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986275, "uuid": "66e6b853-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.188.138:42523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986294, "uuid": "723ab989-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.60:38615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986295, "uuid": "728fab24-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.90.228:54528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986325, "uuid": "84c6a18d-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.128.151:53723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986507, "uuid": "f1483f10-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.28.63:5945/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986508, "uuid": "f1de94a3-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.154.235.131:9538/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986509, "uuid": "f21d5c73-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.197.34.14:35048/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986509, "uuid": "f2418119-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.255.22.43:34579/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986515, "uuid": "f625774d-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.74.195.77:47572/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f62ee874-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.94.170.150:52122/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6608450-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.167.146.80:57376/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6792eb0-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.110.65.178:8008/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f67e4594-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.47.167:11055/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6867077-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.238.227:5721/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f69121f2-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.180.18.194:59825/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f691aab5-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.0.38.27:52419/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f692b08a-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.233.58.217:38177/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f69f3a9a-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.115.252.130:19579/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6a1e7e6-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.77.219.158:29208/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6a6d2ec-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.242.241.75:9436/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6aac54e-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.119.63.1:57246/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6ae66ac-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.202.90:26896/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6b53aa4-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.64.115:9200/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986516, "uuid": "f6c10c70-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.255.78.214:62967/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6d94032-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.145.51.40:27995/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6e4d4a6-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.152.45.93:37048/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6e72428-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.107.157:63185/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6e77b7e-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.60.98.178:52532/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6ee25bf-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.20.176.98:12604/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6ee3708-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.236.1.180:17362/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6eef75a-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.78.203:8636/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6ef0f9b-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.127.223.164:63912/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6fa44e8-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.222.204.191:9355/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6fba233-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.103.1.178:50853/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6fba365-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.55.20.39:49544/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f6fbb4d6-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.167.132.72:36909/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f702417c-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.117.8.131:2078/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f702c30b-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.51.14.37:54550/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f715d6f8-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.156.70:43412/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f716d7c2-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.234.182.122:58471/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f7397e20-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.117.218.251:4414/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f73986f4-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.135.60.25:1414/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986517, "uuid": "f73c29a5-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.131.121.58:42861/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986518, "uuid": "f7830618-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.6.203:8907/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986518, "uuid": "f7ac2946-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.250.152.197:22403/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986519, "uuid": "f81e3057-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.239.215.194:26364/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986519, "uuid": "f858a07b-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.86.182.176:23620/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986520, "uuid": "f8a8dcd8-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.204.250:17778/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986520, "uuid": "f8d13294-d39e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.9.115.88:28580/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986627, "uuid": "3866d400-d39f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.60:38615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986747, "uuid": "8000d0f4-d39f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.211.130:48728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986809, "uuid": "a4cf1717-d39f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.221:42282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986927, "uuid": "eb321353-d39f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.13:59356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736986930, "uuid": "ed060ca4-d39f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.193.30:60137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33706bb8-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.162.204.37/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33800426-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.244.24.30/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "339da088-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.83.104.93:1433/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33ae7469-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.153.97.202:88/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33b3535d-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.229.89:1201/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33b7cfc4-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.205.28.16:8090/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33bf803c-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://20.189.117.246:1132/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33c1d60c-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.238.227.41/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987048, "uuid": "33ceeabe-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.133.238.18:9002/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987049, "uuid": "33e0a52f-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.117.120.68:13000/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987049, "uuid": "33e10601-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.35.235.124:4444/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987049, "uuid": "33e7f4fd-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.178.235.206:8888/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987049, "uuid": "33f14862-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.109.90.134:88/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987049, "uuid": "33f1e458-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.128.167.72:81/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987386, "uuid": "fcee3bd8-d3a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.88.172.114:56457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987410, "uuid": "0b94f0d7-d3a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.32:59077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987646, "uuid": "97c91689-d3a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.128.151:53723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987766, "uuid": "df87b8ca-d3a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.85.126:47480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736987794, "uuid": "f034aa96-d3a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.247.97:43062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988007, "uuid": "6f5a82a8-d3a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.221:42282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988066, "uuid": "924dc5e2-d3a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.211.130:48728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988127, "uuid": "b69cc726-d3a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.158.186:59278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988127, "uuid": "b6aaa157-d3a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.6:57821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988550, "uuid": "b2f87847-d3a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.11.160:60499/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988560, "uuid": "b8a632df-d3a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.46.227:48495/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988787, "uuid": "40090685-d3a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.104.4:36299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988792, "uuid": "434c3118-d3a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.247.97:43062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736988849, "uuid": "65078701-d3a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.6:57821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989088, "uuid": "f3b860c4-d3a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.191.229:33863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989221, "uuid": "42b983ab-d3a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.13.90:39541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989287, "uuid": "6a138e22-d3a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.253.101:53728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989686, "uuid": "57d3dab7-d3a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.137:33518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989686, "uuid": "58069068-d3a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.153.146:58991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989688, "uuid": "58f88ffd-d3a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.158.186:59278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736989688, "uuid": "591e24fe-d3a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.233.158:42822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990166, "uuid": "75f287f4-d3a7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.62.212:43381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990346, "uuid": "e1172a96-d3a7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.119.138:51045/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990346, "uuid": "e16e1eb3-d3a7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.5.241:36248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990346, "uuid": "e196828c-d3a7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.145.210:53181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990527, "uuid": "4d1cc4ea-d3a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.174.8:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990600, "uuid": "78f8ded1-d3a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.30:42950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736990765, "uuid": "db3b9948-d3a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.121.88:38402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991067, "uuid": "8f37cb41-d3a9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.219.57:59673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991201, "uuid": "df0d4ffc-d3a9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.73:59564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991248, "uuid": "fab67336-d3a9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.124.35:39375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991665, "uuid": "f35d9a08-d3aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.163:58998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991726, "uuid": "17f7c685-d3ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.191.229:33863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991846, "uuid": "5f7fa70c-d3ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.5.241:36248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736991966, "uuid": "a6addf37-d3ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.138.29:43218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992025, "uuid": "ca284e4d-d3ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.47.53:60016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992207, "uuid": "36b12708-d3ac-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.233.158:42822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992235, "uuid": "478b276f-d3ac-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.30:42950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992266, "uuid": "597051f7-d3ac-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.121.88:38402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992686, "uuid": "53e3cf1e-d3ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.131.153:46556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992897, "uuid": "d19d0f0d-d3ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.255.202.86:54720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736992987, "uuid": "07312e4f-d3ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.130.44:39839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736993049, "uuid": "2cb280fc-d3ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.46.105:40409/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736993108, "uuid": "4f7c9f55-d3ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.24.139:44725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736993345, "uuid": "dd09b019-d3ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:43943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736993766, "uuid": "d7eae48d-d3af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.24.146:42285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994008, "uuid": "682ad8db-d3b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.96.167:42159/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994013, "uuid": "6b28a61f-d3b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.6.133:44568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994187, "uuid": "d2ae4144-d3b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.107:40009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994307, "uuid": "1a40fa2b-d3b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.219.57:59673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994547, "uuid": "a90c927e-d3b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.89.129:40566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994613, "uuid": "d0c9fbcb-d3b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:43943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994614, "uuid": "d151331d-d3b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.232.110:46372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994614, "uuid": "d1604a89-d3b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.177.101.207:43679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994790, "uuid": "3a2f04bf-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.66:54244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736994848, "uuid": "5cf2c3fe-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.201.41:43677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995025, "uuid": "c63b2447-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.163.220.105:48492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995026, "uuid": "c69c2f26-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.75.173:43721/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995027, "uuid": "c797a976-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.103.132.97:51626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995035, "uuid": "cc584b04-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/n/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995054, "uuid": "d77d57a2-d3b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.75:37394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995447, "uuid": "c1ab3dca-d3b3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.177.101.207:43679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995509, "uuid": "e6b4133b-d3b3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.118.188:48036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995511, "uuid": "e80f2e12-d3b3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.177.27:50208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995704, "uuid": "5b2b769a-d3b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.34.156:50263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736995866, "uuid": "bbc8ca13-d3b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.107:40009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996107, "uuid": "4b3c81a1-d3b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.152.102.46:33958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996598, "uuid": "6ff6a9d6-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.68.40:48253/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996614, "uuid": "799ad191-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.251.236:10527/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996615, "uuid": "79b2fac8-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.79.138.102:36002/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996650, "uuid": "8ead9da1-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.248:53500/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996664, "uuid": "96df606d-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.71.95:45904/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996766, "uuid": "d42767d7-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.194.210:48344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996827, "uuid": "f84dd2e3-d3b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.231.177:54662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996886, "uuid": "1b9e3d50-d3b7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.137.182:42084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996887, "uuid": "1bdf698c-d3b7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.69:38097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736996963, "uuid": "49a17897-d3b7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.68:57351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997309, "uuid": "17d76866-d3b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.77:53508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997311, "uuid": "18f6512a-d3b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.146.51:33075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997359, "uuid": "359e103e-d3b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.37.238:51118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997547, "uuid": "a52f7c71-d3b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.234.57.119:3765/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997608, "uuid": "c9866855-d3b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.89.129:40566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997641, "uuid": "dda7421f-d3b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.209:39986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997786, "uuid": "33c208da-d3b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.188.156:40166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997846, "uuid": "57cb6cb6-d3b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.80.51:48405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736997966, "uuid": "9f0b6331-d3b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.69:38097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998211, "uuid": "31438498-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.66.92:42439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998214, "uuid": "32da2e50-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.130.80:52498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998230, "uuid": "3cb6efbe-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.119.131:43544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998448, "uuid": "bec4c74d-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.57.77:33396/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998449, "uuid": "bf471341-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.122.0:33937/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998450, "uuid": "bfacd22e-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.17.253:54073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998477, "uuid": "cfa7dfc6-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.117.142:35974/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998508, "uuid": "e2676301-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.194.210:48344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998509, "uuid": "e298f368-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.31:47426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998509, "uuid": "e3214dc2-d3ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.105:44008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998626, "uuid": "286c6955-d3bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.231.177:54662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998762, "uuid": "79e4041a-d3bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.113.78:49736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998866, "uuid": "b768f4ee-d3bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.137.182:42084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998866, "uuid": "b7785171-d3bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.82.209:38668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998925, "uuid": "dad3609d-d3bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.77:53508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736998925, "uuid": "db178717-d3bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.164:60299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736999046, "uuid": "22e573a4-d3bc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.8.171:53902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736999226, "uuid": "8e434adc-d3bc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.68.54:43317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736999347, "uuid": "d628c890-d3bc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.146.167:53578/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736999526, "uuid": "40e6425a-d3bd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.100.51:38673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736999529, "uuid": "42a43935-d3bd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.125.196:37903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736999586, "uuid": "64ff1cda-d3bd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.113.78:49736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000009, "uuid": "60d1ce32-d3be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.8.171:53902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000068, "uuid": "840131a9-d3be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.15.123:60812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000143, "uuid": "b0e0c536-d3be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.135.80:33076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000186, "uuid": "ca3a3ba4-d3be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.31:47426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000200, "uuid": "d2b070e8-d3be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.122.187:44358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000263, "uuid": "f8110cf9-d3be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.17:58901/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000306, "uuid": "123c38c1-d3bf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.164:60299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000427, "uuid": "5a45c74f-d3bf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.33.122:36403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000610, "uuid": "c6ea3186-d3bf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.92.78:49216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000725, "uuid": "0be54049-d3c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.68.54:43317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000726, "uuid": "0c3f2143-d3c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.224:49234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737000786, "uuid": "2ffda750-d3c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.171:50807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001027, "uuid": "bf67af22-d3c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.197.155:50598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001087, "uuid": "e34dc0fd-d3c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.105:44008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001146, "uuid": "067169a8-d3c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.17.133.75:53228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001146, "uuid": "069e3210-d3c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.100.51:38673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001147, "uuid": "06f88cd3-d3c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.28.173:60837/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001216, "uuid": "304c3482-d3c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.116.202:56910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001220, "uuid": "327e156e-d3c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.238.152:56356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001326, "uuid": "71b5c063-d3c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.15.123:60812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001580, "uuid": "090d3a8b-d3c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.128.71.180:40890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001686, "uuid": "48761dad-d3c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.49:57770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737001872, "uuid": "b7704711-d3c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.217.208:50690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002048, "uuid": "2070378d-d3c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.92.78:49216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002111, "uuid": "45d8aa08-d3c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.38.34:59205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002120, "uuid": "4af3654c-d3c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.173.255:51878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002166, "uuid": "6681d641-d3c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.94.84:48042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002466, "uuid": "19674e00-d3c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.33.122:36403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002502, "uuid": "2ec403dc-d3c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.72.183:40790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002708, "uuid": "a9acef40-d3c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.15.150:59233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002773, "uuid": "d048de43-d3c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.204:56280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002826, "uuid": "efc36623-d3c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.160.35:49739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002886, "uuid": "13bbecc0-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.173.255:51878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737002947, "uuid": "381af40c-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.50.44:42644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003008, "uuid": "5ca6384a-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.125:42612/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003127, "uuid": "a33580e2-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.128.71.180:40890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003142, "uuid": "ac27f8fe-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.196.1:56262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003186, "uuid": "c6cfbf54-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.119.131:43544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003247, "uuid": "eaea7f98-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.253:55455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003248, "uuid": "eb565679-d3c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.104.223.91:46712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003365, "uuid": "31184795-d3c6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.49:57770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003547, "uuid": "9dcb4f3f-d3c6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.12.118:18477/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003667, "uuid": "e565323c-d3c6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://corepatchcraft.com/libraries_v2", "Tag": [ { "name": "init-module", "colour": "#7af1b7", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003726, "uuid": "08478b28-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.94.84:48042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003786, "uuid": "2c5db426-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.107.87:43925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003787, "uuid": "2c842b7f-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.42:34241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003787, "uuid": "2ce2b287-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.203.87:54639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003788, "uuid": "2d6bbc33-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.107.27:48648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003834, "uuid": "48f0ad3d-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.168.228:45106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003834, "uuid": "48f121e2-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.158:40106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003847, "uuid": "50a39643-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.143.225:49567/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737003847, "uuid": "50cdc261-d3c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.174.43:40386/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004145, "uuid": "02723911-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.38.34:59205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004207, "uuid": "271b55ac-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://situacaonssprj.com/molde/calvao1.png", "Tag": [ { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false }, { "name": "JanelaRat", "colour": "#00fadb", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004208, "uuid": "27ff85c4-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.213.59:58378/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004209, "uuid": "2803d04b-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://63.142.81.158:37277/Mozi.a", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004209, "uuid": "287890d1-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.185:39355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004210, "uuid": "29257b39-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.239.0:45659/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004213, "uuid": "2a7eff1a-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://lojadasmetas.com.br/super/dia06.txt", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "xred", "colour": "#951ef5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004216, "uuid": "2c7d5b0a-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.40:37819/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004226, "uuid": "3264d25d-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.128.180:42431/Mozi.a", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004230, "uuid": "350d55bf-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.230.186:46301/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004237, "uuid": "38e4a5d8-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.249.84:11537/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004237, "uuid": "38fa126c-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.88.205.210:42381/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004237, "uuid": "38fc108d-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.216.41:57531/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004237, "uuid": "391455f2-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.176.134:54234/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004239, "uuid": "3a3dc8bd-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.1.218:34177/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004248, "uuid": "3fb6ac98-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.73.139:44378/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004255, "uuid": "43987863-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.118.211:34825/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004446, "uuid": "b5d52f6a-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.85.22:46286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004446, "uuid": "b5d8a780-d3c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.104.223.91:46712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004746, "uuid": "687c4a0d-d3c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.204.27:52938/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004746, "uuid": "688f97e3-d3c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.196.1:56262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004761, "uuid": "7149b321-d3c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.92.96.164:38095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004884, "uuid": "ba7aa803-d3c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.146.30:50831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737004927, "uuid": "d4319741-d3c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.253:55455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005109, "uuid": "40de2129-d3ca-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.227:52821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005287, "uuid": "ab2212b8-d3ca-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.155:58799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005470, "uuid": "18385a37-d3cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.42:34241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005471, "uuid": "1846f508-d3cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.163.45:44857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005708, "uuid": "a580c98d-d3cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.213.114:38991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005841, "uuid": "f4ccb078-d3cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.106.167:55912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737005887, "uuid": "104050c5-d3cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.162.149.165/psKGLMYRljeu25.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006007, "uuid": "58229af9-d3cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.227:52821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006261, "uuid": "ef3a3d7e-d3cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.160:44055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006309, "uuid": "0bfe723f-d3cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.140.64:47812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006653, "uuid": "d90ecb18-d3cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.15.150:59233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006666, "uuid": "e08eb44b-d3cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.106.167:55912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006846, "uuid": "4bfc1f3f-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.50.44:42644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006846, "uuid": "4c4bdbc2-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.188.16:52725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006847, "uuid": "4c890783-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.173:48250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006908, "uuid": "71084aa0-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.223.102:57892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737006981, "uuid": "9cbc6a6d-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.238.240:54525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007026, "uuid": "b7388c22-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.57.77:33342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007027, "uuid": "b7c60e60-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.215:47508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007027, "uuid": "b7de2aa3-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.155:58799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007087, "uuid": "dbba8ab5-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.239.227.162:43736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007088, "uuid": "dc7c3cf7-d3ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.217.77.214:43850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007212, "uuid": "2657d827-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.239:36051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007387, "uuid": "8e85892c-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.220:37564/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007387, "uuid": "8ed0b059-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.32.125:39948/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007388, "uuid": "8f118b50-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.193.226:40865/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007388, "uuid": "8f172fa0-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.171.88:48103/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007388, "uuid": "8f183605-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.215.46:41820/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007388, "uuid": "8f2404f2-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.163:39662/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007388, "uuid": "8f3e196e-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.87.188:54890/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007388, "uuid": "8f577866-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.229:42580/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007389, "uuid": "8f718418-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.94.30:40730/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007394, "uuid": "92cb2e27-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.210.101.200:37105/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007406, "uuid": "99a9b166-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.130.44:59128/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007413, "uuid": "9e3f656e-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.238.241:40957/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007415, "uuid": "9ef48b4d-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.165:10715/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007415, "uuid": "9ef48c56-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.213.114:38991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007415, "uuid": "9f1e4d16-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.254:10051/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007415, "uuid": "9f3309d0-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.104.99:33823/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007428, "uuid": "a71802d7-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.253.157:33011/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007566, "uuid": "f953395d-d3cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.218:38812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737007868, "uuid": "acf753bd-d3d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.226.228:49589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008046, "uuid": "176705e1-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.215:47508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008047, "uuid": "17b2f149-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.203:38321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008137, "uuid": "4da5efef-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.103.83:52068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008225, "uuid": "81de62f4-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008226, "uuid": "82a4b991-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "83788c3d-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "8378f91e-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "837d7ec4-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "83852574-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008227, "uuid": "8385b312-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.173:48250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "838b08a4-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "83908887-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "83929d9a-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "8399bb1d-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "839f1013-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008228, "uuid": "83ab7e8f-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008347, "uuid": "cae8dbc8-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.102.124:49413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008408, "uuid": "ef17e241-d3d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.57.77:33342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008466, "uuid": "11da7639-d3d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.5.75:48342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008586, "uuid": "591def46-d3d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.98.200.30:34616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008607, "uuid": "65784ef7-d3d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.238.240:54525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008646, "uuid": "7d12ca21-d3d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.239:36051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008707, "uuid": "a108d5be-d3d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.224.119:46270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008765, "uuid": "c39d3355-d3d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.196.182:46989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008866, "uuid": "00398322-d3d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.96:60275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737008886, "uuid": "0c151866-d3d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.222.231:45909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009191, "uuid": "c1e35a6a-d3d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.26.7:57613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009251, "uuid": "e566043b-d3d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.169.15:42323/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009367, "uuid": "2a6cb602-d3d4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.26.7:57613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009494, "uuid": "76655093-d3d4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.116.167:36184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009725, "uuid": "ffe3f848-d3d4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/Kloki.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009726, "uuid": "00d65c99-d3d5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.214.161:34451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009787, "uuid": "24c70f62-d3d5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.218:38812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737009787, "uuid": "24ea25fd-d3d5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.18.82:38742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010266, "uuid": "42bab2c5-d3d6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.222.231:45909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010266, "uuid": "42c19c84-d3d6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.239.227.162:43736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010326, "uuid": "6607a7be-d3d6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.98.200.30:34616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010326, "uuid": "6636273f-d3d6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.228:37585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010626, "uuid": "19224ec4-d3d7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.82.194:35610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010810, "uuid": "87097074-d3d7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.116.167:36184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010926, "uuid": "cbadba4a-d3d7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.228:37585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737010926, "uuid": "cbf4f467-d3d7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.229:56436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011047, "uuid": "1419402c-d3d8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.220.59:32827/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011108, "uuid": "38530db4-d3d8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.214.161:34451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011465, "uuid": "0d64db16-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://activetykes.shop/riii.pub", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011465, "uuid": "0d6be51a-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://85.28.47.60/7939a6d45c749897/sqlite3.dll", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011465, "uuid": "0d6c6c6c-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.24/files/elcachon.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011465, "uuid": "0d77f988-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://80.85.241.225/884af7b2dd911e85/vcruntime140.dll", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011466, "uuid": "0d9c8fcc-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/cuasnckkdsdk/sost/downloads/rr.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011466, "uuid": "0d9eb1b2-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/cuasnckkdsdk/sost/downloads/TarPrivada222.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011466, "uuid": "0dadb000-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://77.91.123.112/b88e8da02b778847/vcruntime140.dll", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011466, "uuid": "0de05a19-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/cuasnckkdsdk/sost/downloads/NewsTarDc29dic.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011466, "uuid": "0e19b3dd-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/cuasnckkdsdk/sost/downloads/NewsYears2025DCStartup.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "0ebdc895-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://activetykes.shop/riii.pub", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "0ecd2b0f-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.26.147/90/sweetnesskissingonmylipsandface.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "0ecd2c37-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/ShaImdd.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "0ecf0f1a-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixazo.online/new-riii-1-b.pub", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "0ef319f8-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.116.179/files/soledad.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011468, "uuid": "0f18704f-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/jigdgSd.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011469, "uuid": "0fcb9b9d-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/kIjddjS.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "1024ea06-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.88/salv.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "10786979-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/odibkkh.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011470, "uuid": "107ac506-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/ripSkkd.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011471, "uuid": "10a70e8d-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/kkhdFjr.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011472, "uuid": "11a20419-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/rtertesd/iougfdgdf/downloads/ScndeFe.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011587, "uuid": "55a6951f-d3d9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.216.29.1:57297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737011927, "uuid": "206d9036-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.29:40142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012067, "uuid": "7414f0c0-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://adventurevault.shop/new-riii-1.ppam", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012246, "uuid": "ded64259-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.217:33500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012246, "uuid": "dedf6469-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.245.160:47442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012247, "uuid": "df3380f7-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.191.76:51581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012247, "uuid": "df3db111-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.63.127:37191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012247, "uuid": "df45f06a-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.64.86.69:48951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012247, "uuid": "df557a5a-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.89.247.155:33846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012275, "uuid": "efcec533-d3da-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.107.196:41031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012308, "uuid": "037e5559-d3db-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.142.176:36915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012669, "uuid": "db24e653-d3db-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharethewebs.click/riii1-b.flv", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012670, "uuid": "dba2ea8b-d3db-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://luxeway.shop/rii1.accde", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012731, "uuid": "000f148a-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://weixe.ir/txt/dSoQilINVVAhwi2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012848, "uuid": "458717f4-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.214.205:41391/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012890, "uuid": "5eda2d7b-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.223.86:59690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737012970, "uuid": "8e12f4b6-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.volareconsultoria.com.br/245_Uhzauuilkul", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013087, "uuid": "d44890b5-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/qrz18p.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013146, "uuid": "f75bc8c6-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.29:40142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013149, "uuid": "f913ec76-d3dc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.216.29.1:57297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013223, "uuid": "255998c6-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.60.147:44919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013444, "uuid": "a9182b65-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hubasur.altervista.org/mshtapayload.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013445, "uuid": "a977daa8-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.26.147/90/moniu/nicegirlsskillgoodforperfectworkingskillforgreatthings.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013447, "uuid": "aa4ba159-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.107.254.213/beacon.exe", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013508, "uuid": "ceabaf9b-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://f.uguu.se/nFxZDJjE.bin", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013509, "uuid": "cf8270a8-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RanjitGandhi2/fff/refs/heads/main/mera.bin", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013510, "uuid": "d038a149-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://tree1.a.pinggy.link/Desktop/Quasar.v1.4.1/Minecraft.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013510, "uuid": "d068af72-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/andresberejno/aaaaaaa/raw/refs/heads/main/Client-base.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013511, "uuid": "d087f9d3-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://cdn.glitch.me/9b056378-bf74-4369-84f2-24a449d0943e/ogpayload.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013537, "uuid": "e07e263f-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.0.60.251:8000/script.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013566, "uuid": "f153421b-d3dd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://christinadudley.com/public_html/cdudley/sites/default/files/1203427/Zjckk0.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013626, "uuid": "15201055-d3de-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.31.15:42279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013629, "uuid": "17464c96-d3de-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.244.165:44897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013746, "uuid": "5cebde55-d3de-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.125:46616/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737013760, "uuid": "656d5482-d3de-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.96:52318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014107, "uuid": "3441c365-d3df-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.203.231:48645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014165, "uuid": "56bb0592-d3df-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.129:41704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014286, "uuid": "9eda85dc-d3df-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.64.86.69:48951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014288, "uuid": "a00f8c51-d3df-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.140.55:43660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014470, "uuid": "0c58750e-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.71.70.125:25843/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014527, "uuid": "2e4da78a-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.237.200:45984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014593, "uuid": "55b592d5-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.223.86:59690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014614, "uuid": "6242b362-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.229:42580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014646, "uuid": "756b19a6-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.108:35672/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014646, "uuid": "757e9f36-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.120.166:49363/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014706, "uuid": "98e12bd1-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.229.115:45720/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014707, "uuid": "99839d6e-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.210.3:45008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014761, "uuid": "ba0621a9-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.132.159:53591/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737014826, "uuid": "e078c22d-d3e0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.60.147:44919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015008, "uuid": "4d0d6877-d3e1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.142.176:36915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015065, "uuid": "6f02ffa5-d3e1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.140.55:43660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015066, "uuid": "6fa28575-d3e1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.107.107:45243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015129, "uuid": "94e87f54-d3e1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia600805.us.archive.org/10/items/new_image_202501/new_image.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015262, "uuid": "e41d61ae-d3e1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.129:41704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015366, "uuid": "22ae1392-d3e2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.25:38431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015547, "uuid": "8e3c779b-d3e2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.161:48964/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015547, "uuid": "8e6b98c9-d3e2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.34.5:51083/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015565, "uuid": "98c7da51-d3e2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.145:52510/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015802, "uuid": "263ad379-d3e3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.145.52:43449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015846, "uuid": "40cc2f6d-d3e3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.24.182:56102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015966, "uuid": "87ebe1f1-d3e3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.237.200:45984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737015967, "uuid": "886d2198-d3e3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.50.154:60530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016085, "uuid": "cf27601f-d3e3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.42.127:59079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016093, "uuid": "d38f08af-d3e3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.39.204:51245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016271, "uuid": "3e1cd233-d3e4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.210.3:45008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016466, "uuid": "b1fa13c2-d3e4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.7.69:47948/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016564, "uuid": "ecbbbbd4-d3e4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.107.107:45243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737016865, "uuid": "9fef81e7-d3e5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.224:49234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017107, "uuid": "300988e3-d3e6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.25:38431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017165, "uuid": "52b0294c-d3e6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.224.192:48595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017348, "uuid": "bfb28446-d3e6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.92.96.164:38095/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017348, "uuid": "bfde36b8-d3e6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.11.251:58364/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017409, "uuid": "e4011373-d3e6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.233:58462/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017587, "uuid": "4e1fbabe-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.237.187:56346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017628, "uuid": "6670473d-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.127.252:53113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017647, "uuid": "71c3d542-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.212.97:47247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017708, "uuid": "963c3e5b-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.214.165:47773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017724, "uuid": "9fe3cad3-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.28.204:45166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017765, "uuid": "b87ec017-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.39.204:51245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737017774, "uuid": "bd974d06-d3e7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.156.53.111:46605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018126, "uuid": "8f6f3719-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.24.182:56102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018127, "uuid": "8fd6e85f-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.97.200.96:39309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018127, "uuid": "90121fc3-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.16.22:49831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018185, "uuid": "b2b06aa3-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.26:53138/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018187, "uuid": "b3b42453-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.26.123:39178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018215, "uuid": "c47eab8b-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.251.138:10861/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018215, "uuid": "c49ab0f6-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.105:36908/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018247, "uuid": "d7934c67-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.208:50162/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018308, "uuid": "fbee3af1-d3e8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.78:52231/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018427, "uuid": "42e36590-d3e9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.139.147/server", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018427, "uuid": "4325dec7-d3e9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.139.147/server.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018485, "uuid": "6550fed3-d3e9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.139.147/Documents/Infoblatt_Ausnahmesituation.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018486, "uuid": "65ffa75f-d3e9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.237.187:56346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018607, "uuid": "ae7a7ded-d3e9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.224.192:48595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018667, "uuid": "d1d56a31-d3e9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.156.53.111:46605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018786, "uuid": "18a86f15-d3ea-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.71.238:47420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737018846, "uuid": "3ce2e226-d3ea-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.53.226:46359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019086, "uuid": "cbd75dec-d3ea-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.212.97:47247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019088, "uuid": "cd12b818-d3ea-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://codebizz.com/celebrationannabirthday.mp4", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019267, "uuid": "37b3f91e-d3eb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.26.147/90/createdbestthingswithnicegreatpicturewithme.tIF", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019394, "uuid": "837fd1e2-d3eb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.16.22:49831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019507, "uuid": "c6ad54b6-d3eb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.214.165:47773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019685, "uuid": "30d4d79d-d3ec-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.127.143:57569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019745, "uuid": "545dfb35-d3ec-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.22/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019745, "uuid": "547d5ce0-d3ec-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.22/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019746, "uuid": "54ccaec9-d3ec-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.22/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019811, "uuid": "7bbbec98-d3ec-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.22/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737019811, "uuid": "7bbcca63-d3ec-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.22/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020048, "uuid": "08fe7c20-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.228.178:58150/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020048, "uuid": "09413b72-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.194:39101/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020052, "uuid": "0b4e66e8-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.181.3:36168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020167, "uuid": "50132b89-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.53.226:46359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020406, "uuid": "de9823e9-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.122.255.155:46238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020409, "uuid": "e07c697f-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.159.96.3:48136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020410, "uuid": "e0c0fc55-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.47.219:41341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020410, "uuid": "e0c99b70-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.177.233.235:39989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020436, "uuid": "f071b98e-d3ed-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.40.179:54846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737020525, "uuid": "25937474-d3ee-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.153.254:55897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021067, "uuid": "687a8f0a-d3ef-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.26.144.48:51624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021846, "uuid": "38ab1f10-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/grab.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021846, "uuid": "38c14a1b-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/bdata.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021846, "uuid": "38f20b8b-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/e.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021846, "uuid": "390c6969-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/file.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021847, "uuid": "391b2b40-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/svhost.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021847, "uuid": "3928d16a-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/exclude.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737021847, "uuid": "39ab7ad5-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/k53xupn43/i965652f/blob/main/m.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022026, "uuid": "a3f85925-d3f1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.50.154:60530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022385, "uuid": "7a57e8a6-d3f2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.136:60447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022507, "uuid": "c2fe6994-d3f2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.153.146:58991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022686, "uuid": "2d504c42-d3f3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.153.254:55897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737022927, "uuid": "bd0ff230-d3f3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.98:40424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023647, "uuid": "6a86e0d9-d3f5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.171.17:40544/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023765, "uuid": "b09bf858-d3f5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.59.52:52398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023886, "uuid": "f89c119d-d3f5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.179:50149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023946, "uuid": "1c7888b0-d3f6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dytflt61n/image/upload/v1733135243/buuojldok3advo2jph2s.jpg", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737023951, "uuid": "1f4023d2-d3f6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.88/DetahNote.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024488, "uuid": "5f40ccb2-d3f7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.aviationchartersolutions.com/form/php-mailer/examples/styles/bin/Tuyen/Tuyen_ALL", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024548, "uuid": "837a4250-d3f7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.79.200:41471/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737024862, "uuid": "3e782c0e-d3f8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.126.220:57707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737025145, "uuid": "e75a3c4b-d3f8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.82.194:35610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737025388, "uuid": "77dd4e3c-d3f9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.161.24.4:49222/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737025508, "uuid": "bf3ac78c-d3f9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.222.49:49310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737025626, "uuid": "05b66043-d3fa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.138.29:43218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737025745, "uuid": "4cc7dafb-d3fa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://73.106.212.249:58666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026285, "uuid": "8e6b3136-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.aviationchartersolutions.com/form/php-mailer/examples/styles/bin/Tuyen/Tuyen.b64", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026286, "uuid": "8f6ce1df-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.aviationchartersolutions.com/form/php-mailer/examples/styles/bin/Adonis/Adonis_Pure_ENC", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026287, "uuid": "8f9630b8-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.aviationchartersolutions.com/form/php-mailer/examples/styles/bin/Adonis/Adonis.b64", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026287, "uuid": "8f9813b7-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.aviationchartersolutions.com/form/php-mailer/examples/styles/bin/Tuyen/Tuyen_Pure_ENC", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026288, "uuid": "90ac1b99-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.aviationchartersolutions.com/form/php-mailer/examples/styles/bin/Adonis/Adonis_ALL", "Tag": [ { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026289, "uuid": "90c7954c-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.1:35169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026345, "uuid": "b2725265-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tracked-dosage-deeper-verbal.trycloudflare.com/b1.js", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026345, "uuid": "b2912465-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tracked-dosage-deeper-verbal.trycloudflare.com/ap.bat", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026347, "uuid": "b37f28ec-d3fb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tracked-dosage-deeper-verbal.trycloudflare.com/DE/RE-101.pdf.lnk", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737026645, "uuid": "657128e2-d3fc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.126.220:57707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027069, "uuid": "61cea5c7-d3fd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.189.9:47670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027250, "uuid": "cdec0ce7-d3fd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.98:46727/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027426, "uuid": "36cef662-d3fe-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.242.219:35389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027486, "uuid": "5aba0074-d3fe-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.157:57704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027726, "uuid": "e9915429-d3fe-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.244.146:53753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737027908, "uuid": "5600e868-d3ff-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.1:35169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028038, "uuid": "a344f724-d3ff-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.34.61:60650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028147, "uuid": "e45569fc-d3ff-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.93.175.62:39669/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028208, "uuid": "0893fc62-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.189.169.165:56633/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028264, "uuid": "2a0a981f-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.243.78:59760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028292, "uuid": "3afd2e87-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.185.142.75:58527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028309, "uuid": "45483621-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.61.21:33048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028386, "uuid": "72c9e90c-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.242.219:35389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028508, "uuid": "bb6d7759-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.218.166:56766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028508, "uuid": "bb934e0b-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/097o37h4acce0wdq585d8/R000193294-672PDF.zip?rlkey=r8f52wntrgy6jct7zm5i9fylv&", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028508, "uuid": "bbd6e0e8-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.45.40:42652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028509, "uuid": "bc6acbbc-d400-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/097o37h4acce0wdq585d8/R000193294-672PDF.zip?rlkey=r8f52wntrgy6jct7zm5i9fylv&st=tly4booj&dl=0", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028688, "uuid": "272e9aa8-d401-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://codebizz.com/XYKSADFO.exe", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737028925, "uuid": "b45d0c78-d401-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.12/vv/armv7l?ddos", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737029047, "uuid": "fd31c518-d401-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.119:50608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737029048, "uuid": "fd68dd5e-d401-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.8.166:37940/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737029048, "uuid": "fdb1dc46-d401-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.101.255:51360/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737029411, "uuid": "d602bdfe-d402-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.73.167:36389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737029526, "uuid": "1a8ee679-d403-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.189.9:47670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737029966, "uuid": "20949d95-d404-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.30.84:35872/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030127, "uuid": "807d5b23-d404-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.218.166:56766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030426, "uuid": "329f8fe0-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.73.167:36389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030545, "uuid": "798492a8-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/main.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030545, "uuid": "798d91d7-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/webcam.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030545, "uuid": "799061fb-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/mic.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030545, "uuid": "79a9ae3b-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/antivm.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030545, "uuid": "79ad4353-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/injection.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030546, "uuid": "7a189364-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/main.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030547, "uuid": "7ab3b948-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pirate-Devs/Kematian/blob/main/frontend-src/blockhosts.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030610, "uuid": "a0927d06-d405-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.12.67:52738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030788, "uuid": "0a9d0b7b-d406-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.119:50608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030908, "uuid": "5222cef7-d406-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.143.225:49567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030913, "uuid": "5515b18f-d406-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.9.76:59573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737030923, "uuid": "5afcee70-d406-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.48.139:51468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032117, "uuid": "22a460bf-d409-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.189:52383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032226, "uuid": "637ded8a-d409-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.12.67:52738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032346, "uuid": "ab6f6ecf-d409-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.143.225:49567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032647, "uuid": "5ec090ed-d40a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.47.5:47673/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032649, "uuid": "5fedb944-d40a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.9.76:59573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032660, "uuid": "667b2cfe-d40a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.58.227:43531/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737032885, "uuid": "ecb4b439-d40a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.48.139:51468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737033247, "uuid": "c4525b97-d40b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.191:50418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737033276, "uuid": "d5a30c6a-d40b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.51:43798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737033487, "uuid": "53565eca-d40c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.179.125.252:46797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737033549, "uuid": "786b909a-d40c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.155.165:53252/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737033967, "uuid": "7152fe01-d40d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.199.107:60849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034026, "uuid": "9462bff9-d40d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixecondfirbook.info/captcha/package.zip", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "DOILoader", "colour": "#01957c", "exportable": true, "hide_tag": false }, { "name": "elchapo", "colour": "#b110f9", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "ItalianPasta", "colour": "#f1f9a8", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034146, "uuid": "dbfd54fe-d40d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://arting.ee/cgi-bin/netsup_clean.ps1", "Tag": [ { "name": "ItalianPasta", "colour": "#f1f9a8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034217, "uuid": "06495214-d40e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://motel6lax.com/fly/mot.zip", "Tag": [ { "name": "ItalianPasta", "colour": "#f1f9a8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034272, "uuid": "27290e91-d40e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.68:36258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034390, "uuid": "6da35761-d40e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.179.125.252:46797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034446, "uuid": "8ee958ba-d40e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://63.142.81.158:37277/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737034447, "uuid": "8f811fd6-d40e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.56.233:50468/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035166, "uuid": "3c5469b5-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.190:32902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035167, "uuid": "3ca8b594-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.12.252:51221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035167, "uuid": "3cace496-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.167.226:33927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035194, "uuid": "4cdd726a-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.224/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035226, "uuid": "5ff1e7fc-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.35:42182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035227, "uuid": "6057f5cd-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.105.51:50398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035346, "uuid": "a73ece92-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.177.144:60013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737035347, "uuid": "a80cbb36-d410-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.185.151:45984/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036066, "uuid": "544e9aa0-d412-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.janroe.org/run", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036247, "uuid": "c096f478-d412-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.103:33256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036249, "uuid": "c1c2faf0-d412-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.254:42571/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036307, "uuid": "e47e6cf2-d412-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.88:50829/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036608, "uuid": "976b49a4-d413-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.247.83:53667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036785, "uuid": "0161eb81-d414-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.188.216:39347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737036863, "uuid": "2f81bfac-d414-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.168.196:40920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737037025, "uuid": "9076dff3-d414-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.141.72:42661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737037144, "uuid": "d765f843-d414-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.122.255.155:51668/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737037145, "uuid": "d766f75c-d414-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.205.55.156:39322/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737037266, "uuid": "1f94382d-d415-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.161:48964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737037343, "uuid": "4dce0338-d415-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.118.176:59657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737037876, "uuid": "8b655849-d416-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.211:57987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038048, "uuid": "f1c80e9a-d416-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.245.2.63:48383/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038048, "uuid": "f1dbe912-d416-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.239:44055/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038066, "uuid": "fcae2c24-d416-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.109:40237/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038226, "uuid": "5bc594db-d417-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.188.216:39347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038226, "uuid": "5be3458f-d417-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.168.196:40920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038646, "uuid": "5641a74a-d418-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.161:48964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038765, "uuid": "9d5e3f8f-d418-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.101.153:34166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737038945, "uuid": "08a4275c-d419-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.85.216:33386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737039066, "uuid": "50ccbcc0-d419-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.221:46165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737039126, "uuid": "746be5f7-d419-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.118.176:59657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737039366, "uuid": "033ff2ac-d41a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.138.183:40120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737039425, "uuid": "267595af-d41a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.244.139.76:53751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737039546, "uuid": "6ef6173e-d41a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.87.74:48926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737039786, "uuid": "fdeeec25-d41a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.61.226.34:36057/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737040087, "uuid": "b10848c5-d41b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.12.178:40514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737040208, "uuid": "f9795410-d41b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.210.38:44161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737040566, "uuid": "ce9cde17-d41c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.101.153:34166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737040593, "uuid": "deffec25-d41c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.211:57987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737040765, "uuid": "4528be4f-d41d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.43.0:60866/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041045, "uuid": "ec7c6e7e-d41d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/hidden.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041046, "uuid": "ecaf67e7-d41d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://edidos.shop/new-riii-1-b.pub", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "FakePub", "colour": "#07def4", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041046, "uuid": "ecdec584-d41d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sparticus.shop/s7.mp4", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "FakeMP4", "colour": "#b7dad6", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041046, "uuid": "ecdf815c-d41d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://e1.foiloverturnarrival.shop/5c85i3vbf.vdf", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "vdf", "colour": "#2e8e80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041226, "uuid": "582c4bef-d41e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.99.24:54228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041410, "uuid": "c5bdbc45-d41e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.12.178:40514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041411, "uuid": "c664f5bc-d41e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://f1.foiloverturnarrival.shop/riiw1.mp3", "Tag": [ { "name": "FakeMP3", "colour": "#0b0292", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041411, "uuid": "c6657970-d41e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.152.163:36325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041649, "uuid": "5457dd6b-d41f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.117.198:37804/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041665, "uuid": "5e15fa22-d41f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.252.101.43:34063/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737041711, "uuid": "79193667-d41f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.138.183:40120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042366, "uuid": "ffe0bb39-d420-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.122.255.155:51668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042486, "uuid": "4710c690-d421-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.210.38:44161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042546, "uuid": "6ac07006-d421-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.85.46:32936/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042607, "uuid": "8f517f1c-d421-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.6.58:44456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042736, "uuid": "dc0eb834-d421-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.138.218:55724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042785, "uuid": "f9a7ce69-d421-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.85.216:33386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737042907, "uuid": "41ddc225-d422-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.87.74:48926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043086, "uuid": "acdbdd3e-d422-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CelestialNFT/PrivateKey-Generator/raw/refs/heads/main/Wallet-PrivateKey.Pdf.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043086, "uuid": "acfda868-d422-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AdobePdf-Reader/Pdf-Reader/raw/refs/heads/main/Pdf%20Reader.exe", "Tag": [ { "name": "stealerium", "colour": "#03cdde", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043146, "uuid": "d081c61d-d422-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.127.53.249/SrKfHnteV45.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043209, "uuid": "f5fe1b7d-d422-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.183.222.116/ORQpMoLlssVFzp35.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043326, "uuid": "3bb2c079-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.7.208:60238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043326, "uuid": "3bd8c02e-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.75.33.34:47925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043326, "uuid": "3c091048-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.232.142:48175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043326, "uuid": "3c21a7d8-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.231.233:43670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043385, "uuid": "5f3b9dec-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.113.115.215/ScreenUpdateSync.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043449, "uuid": "84f55576-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.207.172:35753/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043465, "uuid": "8eefb9b8-d423-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.96:34070/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043685, "uuid": "11df8a44-d424-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.6.58:44456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043864, "uuid": "7cb62e5c-d424-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.75.33.34:47925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043865, "uuid": "7d04ce17-d424-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.215.81:54846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737043986, "uuid": "c58895e6-d424-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.97.215:48041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737044047, "uuid": "e9b4281f-d424-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.199.241.47:42759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737044125, "uuid": "185d65de-d425-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.65:60267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737044226, "uuid": "543973f5-d425-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.188.206:39763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737044346, "uuid": "9bb99f68-d425-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.184.192:48861/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737044407, "uuid": "c0287668-d425-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.164.20:53669/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737044416, "uuid": "c56983b6-d425-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.241.164:56866/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045261, "uuid": "bd1ad6de-d427-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.37:34455/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045307, "uuid": "d8aee4ea-d427-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.231.233:43670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045307, "uuid": "d8c2dc13-d427-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.174.71:49108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045308, "uuid": "d90eaf4c-d427-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.138.218:55724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045427, "uuid": "1fec2904-d428-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.199.241.47:42759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045725, "uuid": "d1e131f1-d428-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.58.244:43466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045785, "uuid": "f5b841bc-d428-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.188.206:39763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737045966, "uuid": "6173697d-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.193.104:37033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046084, "uuid": "a7d01d20-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://tekascend.com/a/1.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046084, "uuid": "a7e571cd-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://tekascend.com/a/6.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046084, "uuid": "a80cb97f-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://goaccredited.biz/o/6.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a80de57c-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://patbunn.com/o/6.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a80e3c7c-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://patbunn.com/o/6.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a84a7f2d-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://goaccredited.biz/o/1.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a8562db7-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://pucchiswelt.com/a/6.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a861db83-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://pucchiswelt.com/a/1.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a863ac87-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/6.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046085, "uuid": "a8684ff4-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/1.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046087, "uuid": "a9bdd5c9-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/7.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046088, "uuid": "a9ef473b-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/11.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046088, "uuid": "a9ef480a-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/2.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046088, "uuid": "a9ef5bae-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/5.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046088, "uuid": "a9ef5db3-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/8.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046088, "uuid": "a9ef686d-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/4.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046088, "uuid": "aa04d1cf-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/10.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046101, "uuid": "b21eb4c0-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.77.159:38346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046102, "uuid": "b24b16ae-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/3.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046103, "uuid": "b2d111f8-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/9.png", "Tag": [ { "name": "neonprimetime", "colour": "#7edce0", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046147, "uuid": "cd4e2159-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.35.185:35446/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046148, "uuid": "ce287b95-d429-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.221.203:43982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046386, "uuid": "5bd05998-d42a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.197:47173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046567, "uuid": "c76bc475-d42a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.211:58442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046745, "uuid": "31d97383-d42b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.21.209.140:42388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737046986, "uuid": "c1661eef-d42b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.193.104:37033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047107, "uuid": "0962575d-d42c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.62.44:35511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047107, "uuid": "098a99ee-d42c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.58.244:43466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047305, "uuid": "7fc3cab1-d42c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.117.20:49948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047887, "uuid": "da8c3a03-d42d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.105.51:50398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737047960, "uuid": "060efeb7-d42e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.121.56:41127/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048066, "uuid": "44fb584e-d42e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.77.159:38346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048126, "uuid": "69049255-d42e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.197:47173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048127, "uuid": "69bc7f80-d42e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.11.146:46361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048485, "uuid": "3f253bd3-d42f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.62.44:35511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048486, "uuid": "3f420a21-d42f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.117.20:49948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048629, "uuid": "948784f8-d42f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.141.57:54073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048672, "uuid": "ae57c0b9-d42f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.249.238:45572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048688, "uuid": "b7d1615e-d42f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.116.217:54130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048862, "uuid": "1f4bbd13-d430-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.117.0:42274/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048873, "uuid": "25dc1e43-d430-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.175:37521/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737048966, "uuid": "5d9ad86e-d430-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.37.179:52498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049146, "uuid": "c8907702-d430-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.211:58442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049208, "uuid": "ee0f10cc-d430-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.13.90:39541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049266, "uuid": "109e5f77-d431-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.146.39:55409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049326, "uuid": "33fba6fd-d431-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.11.146:46361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049386, "uuid": "57d56414-d431-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.55.58:57386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049387, "uuid": "58a61c38-d431-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.72.58:54502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737049746, "uuid": "2ec66050-d432-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.226.163:51934/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050045, "uuid": "e0e4a900-d432-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.107.87:43925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050363, "uuid": "9e102415-d433-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.68:59566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050586, "uuid": "2361d923-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.174.71:49108/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050587, "uuid": "238d092f-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.168.10:36082/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050590, "uuid": "2584be13-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.142.231:52115/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050602, "uuid": "2cf19cd6-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.214.170:51812/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050602, "uuid": "2cf3cf38-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.185:47606/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050614, "uuid": "3406cae4-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.241:35233/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050614, "uuid": "3406d54d-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.31.117:33516/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050615, "uuid": "342f0421-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.165.217:50368/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050615, "uuid": "342fe019-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.235:10524/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050615, "uuid": "345886c1-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.111.120:58978/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050615, "uuid": "3476f595-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.244.221:47800/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050647, "uuid": "4790075b-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.146.39:55409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050714, "uuid": "6f96416f-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.55.58:57386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737050765, "uuid": "8de6441a-d434-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.214.132:39617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051067, "uuid": "41cf309a-d435-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.224:33967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051080, "uuid": "49b76e79-d435-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.61.185:52244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051485, "uuid": "3b08d240-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.132.19.197:54857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051487, "uuid": "3c2aeb43-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.45:60471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051487, "uuid": "3c2cebe4-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.104.195:38085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051547, "uuid": "5fb89d57-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.142:40965/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051547, "uuid": "5fe1b9aa-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.47.26:45767/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051608, "uuid": "8479cdfc-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.43.195:58772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051669, "uuid": "a8ab4635-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.199.143.123:43018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051786, "uuid": "ee238f98-d436-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.68:59566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737051847, "uuid": "12d3ea6e-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.250.42:41362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052144, "uuid": "c3d5c650-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052144, "uuid": "c3d9f65d-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c5517d8a-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c551ceb8-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c551d6f8-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c551e8e1-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c553ba60-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c55d6318-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c55d6997-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c565974b-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c565b06a-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052147, "uuid": "c565b3e0-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052212, "uuid": "ec178e72-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.66/nA0diE1/pecga.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052213, "uuid": "ed2992e2-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.160:50355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052214, "uuid": "ed4af0be-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://servivemirctosoftliveanble.top/kKLFHRRKLFKJLj34345734786frhjrelkwefhjKJjhfjwkgjkJFRKFRHJ342334KLFJK/lica", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052215, "uuid": "ee552941-d437-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://gh-hr.cn/beacon.exe", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052279, "uuid": "1409e156-d438-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.224:33967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052448, "uuid": "78d88749-d438-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.7.230:50470/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052465, "uuid": "832c418b-d438-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.113.198:37469/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052510, "uuid": "9e208fc0-d438-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.25:34705/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052566, "uuid": "bf52d069-d438-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.29.146:53934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052626, "uuid": "e34d31e9-d438-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.91.160:49177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737052714, "uuid": "179d40c7-d439-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.86.84:59668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053229, "uuid": "4ab73dce-d43a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.8.121:58414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053286, "uuid": "6c5a63c7-d43a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.206.87:35990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053346, "uuid": "9080ec83-d43a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.166.222:49343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053465, "uuid": "d731e1b0-d43a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.220.83:25181/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053647, "uuid": "435d1a10-d43b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.180.157:36010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053826, "uuid": "ae551533-d43b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.7.175:43199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737053900, "uuid": "da4616fe-d43b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.16.104:33253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054186, "uuid": "84b3734a-d43c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.171:50807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054248, "uuid": "a99ae894-d43c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.8.121:58414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054250, "uuid": "ab504d7b-d43c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.48.155.182:39709/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054334, "uuid": "dd5a490d-d43c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.91.160:49177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054725, "uuid": "c6412491-d43d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.206.87:35990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054846, "uuid": "0e0ec1b2-d43e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.166.222:49343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054846, "uuid": "0e23930f-d43e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.251.183:44636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737054848, "uuid": "0fa4fdc3-d43e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.100.66:33346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055146, "uuid": "c13695e7-d43e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.220.222:32962/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055149, "uuid": "c2eda429-d43e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.125:39288/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055166, "uuid": "ccfb3305-d43e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.101.246:37765/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055326, "uuid": "2c205bd3-d43f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.180.157:36010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055535, "uuid": "a8e99c10-d43f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.79.54/15012025/PFQxUwR6vgb93gWiML3L.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055642, "uuid": "e88785dd-d43f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.50:53393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055714, "uuid": "13bfedb0-d440-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hardcorelegends.com/a/12.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055926, "uuid": "9238d8c4-d440-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.60.118:46745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737055987, "uuid": "b639603d-d440-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.69.100:26389/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737056062, "uuid": "e3380755-d440-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.32.83:36068/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737056143, "uuid": "13a91bdd-d441-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.115.16:55479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737056534, "uuid": "fc2d688b-d441-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.45.73:39242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737056693, "uuid": "5b027173-d442-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.218:44008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737056784, "uuid": "91508c56-d442-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.17.103:59164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057008, "uuid": "16d7dcaa-d443-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.60.243:47318/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057426, "uuid": "10045631-d444-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.60.118:46745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057486, "uuid": "33e6c814-d444-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.236.127:50645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057497, "uuid": "3a3b9688-d444-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.238.224:59988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057726, "uuid": "c2d14d51-d444-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.106:43871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737057965, "uuid": "51759475-d445-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.236.51:45576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058289, "uuid": "1290d52f-d446-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.167:48136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058576, "uuid": "bd477c89-d446-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.186.177:44883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058626, "uuid": "dba75066-d446-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.106:43871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058627, "uuid": "dc098674-d446-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.255:45112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058748, "uuid": "23cf0814-d447-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.43.125:37949/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058807, "uuid": "475f96c5-d447-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.50:53393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737058866, "uuid": "6a69dfd5-d447-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.21.58:57753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059107, "uuid": "f9c91844-d447-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.236.51:45576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059239, "uuid": "4905134d-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.237.206:34491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059344, "uuid": "871987d0-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.111.37/hiddenbin/boatnet.m68k", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059344, "uuid": "8719a9d4-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.111.37/hiddenbin/boatnet.arm6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059344, "uuid": "8719b881-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.111.37/hiddenbin/boatnet.arc", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059344, "uuid": "8719bc52-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.111.37/hiddenbin/boatnet.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059344, "uuid": "87205c74-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:43809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059345, "uuid": "881deb18-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.162:46056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059410, "uuid": "aea39a03-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:49845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059411, "uuid": "af39634e-d448-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.169:52451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059649, "uuid": "3cdd9704-d449-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.101.103:52587/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059766, "uuid": "82a34fba-d449-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.72.222.144:34134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737059886, "uuid": "ca6e9619-d449-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.186.177:44883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060127, "uuid": "59cd6074-d44a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.167:48136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060187, "uuid": "7d864faf-d44a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.186.165:33392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060486, "uuid": "2fda52ad-d44b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.237.206:34491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060738, "uuid": "c6611ec0-d44b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.21.29:33962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060846, "uuid": "06df3f56-d44c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.99.196:50263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737060907, "uuid": "2b3b5e8a-d44c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:49845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061164, "uuid": "c3d97a1e-d44c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.206.83:52411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061386, "uuid": "489a6221-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.13.146:39726/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061387, "uuid": "490ec3f2-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.27.141:54256/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061387, "uuid": "4958aa0e-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.235.24:45575/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061392, "uuid": "4be37503-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.138.12.125:37138/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061401, "uuid": "51715a5b-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.32.116:33576/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061414, "uuid": "59268193-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.197.252:38308/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061414, "uuid": "5940ea52-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.15.10.177:34447/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061414, "uuid": "594fd5c3-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.111.101.214:43200/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061414, "uuid": "594fdf81-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.109:10169/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061415, "uuid": "5982cd94-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.179:56472/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061419, "uuid": "5c21c228-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.99.43.3:53489/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061447, "uuid": "6c8662ac-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.12.13:53929/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061507, "uuid": "90af5c1f-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.176:44965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737061627, "uuid": "d7f8505b-d44d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.11.13:38158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062108, "uuid": "f6f9c0b3-d44e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.116.124:57671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062167, "uuid": "19cc30f0-d44f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.87.123:36461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062291, "uuid": "63a8cd7b-d44f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.159.141:59772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062465, "uuid": "cb8d4785-d44f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.104.195:38085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062526, "uuid": "efdb7a9a-d44f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.208.56:51285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062526, "uuid": "eff83618-d44f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.132.46.218:37100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062586, "uuid": "13e0564f-d450-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.79:52451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737062826, "uuid": "a30e6978-d450-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.241:49250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063013, "uuid": "1271dad6-d451-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.11.13:38158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063368, "uuid": "e595d5b0-d451-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.27:45080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063434, "uuid": "0d083b11-d452-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.43.0:60866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063487, "uuid": "2ca116b7-d452-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.3.187:47998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063786, "uuid": "dedc9ece-d452-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.155.200:59900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063846, "uuid": "0272f14b-d453-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.208.56:51285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063908, "uuid": "2798af05-d453-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.111:38615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737063965, "uuid": "49d85600-d453-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.21.29:33962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064386, "uuid": "4496b30a-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.241:49250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "6b72bae6-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/tertegfj/fnbvdf/downloads/dpfapdo.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "6b914836-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/enerotwenty/notiicaciones/downloads/fuck.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064451, "uuid": "6b9e2822-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/enerotwenty/notiicaciones/downloads/remcos_a2.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064452, "uuid": "6bcc5070-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/tertegfj/fnbvdf/downloads/hikSSII.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064452, "uuid": "6bd18766-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/enerotwenty/notiicaciones/downloads/4909_7122.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064511, "uuid": "8edefa8a-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ilera1/jakerst/raw/refs/heads/main/yuksefyj.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064517, "uuid": "9296c7d0-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.211.213:42157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064567, "uuid": "b05e79c9-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/nhgbf/hgfa/downloads/NewApp.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064567, "uuid": "b093625e-d454-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/nhgbf/hgfa/downloads/Updater.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064746, "uuid": "1b6986dc-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.60:40828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064866, "uuid": "62eadad8-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.120.166:49363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064867, "uuid": "63350768-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.95:35535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064986, "uuid": "aa6263cb-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.3.187:47998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737064986, "uuid": "aa79212e-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.161:54038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065007, "uuid": "b70823ff-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.176:42763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065108, "uuid": "f32b953f-d455-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.60.101.71:59536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065229, "uuid": "3b2fd60a-d456-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.43.0:60866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065286, "uuid": "5cff7e6e-d456-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.129:48796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065708, "uuid": "587ae04a-d457-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.179:50149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065708, "uuid": "58d5d35a-d457-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.123.114:45751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065947, "uuid": "e6fcd1a6-d457-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.139.149:43647/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065947, "uuid": "e7014483-d457-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.38.60:53067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065947, "uuid": "e70190e8-d457-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.152.8:35292/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737065958, "uuid": "ed6551c9-d457-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.106.159:40143/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066065, "uuid": "2d21225d-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.202.190:43525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be1a750b-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be1e0f47-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be263326-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be41d54b-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be427998-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be42fbd6-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be431685-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be442b3f-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be456858-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be45ebf2-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066308, "uuid": "be4b8630-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/f2q2kke5aadloo4aasdjjjfirbmw/0xh0roxxnavebusyoo.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066370, "uuid": "e31a68d9-d458-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.208.124:52638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066486, "uuid": "2808b499-d459-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.211.213:42157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066486, "uuid": "28517c8b-d459-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.192.27:34488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066561, "uuid": "54c54b52-d459-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.66.44:38496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737066965, "uuid": "4588a0d6-d45a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.120.166:49363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067146, "uuid": "b1baaec7-d45a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.111:38615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067147, "uuid": "b21db7a7-d45a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.67.34:34457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067266, "uuid": "f91ab8ab-d45a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.129:48796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067266, "uuid": "f927bd6b-d45a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://eprimemart.shop/s61.mp4", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067744, "uuid": "1620fa21-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://eiesoft.com/Ray-verify.html", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067804, "uuid": "3a211cd8-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.111.37/hiddenbin/boatnet.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067807, "uuid": "3bd8b487-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.211.34:50947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067807, "uuid": "3bf7fef3-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.208.124:52638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067812, "uuid": "3ef01878-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:2072/b/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067813, "uuid": "3f655323-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:2072/b/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067820, "uuid": "437d6888-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.240.180:41647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737067851, "uuid": "56313c62-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.162.108:51557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068108, "uuid": "eee99116-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.184.33:41449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068108, "uuid": "ef03c5c0-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.66.44:38496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068110, "uuid": "f045e42c-d45c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.88.126:49980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068226, "uuid": "35537f12-d45d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.35.180:57846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068286, "uuid": "590c6854-d45d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.192.27:34488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068526, "uuid": "e860c732-d45d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.189:46682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068541, "uuid": "f145bdda-d45d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.30.83:33581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068629, "uuid": "25b73d78-d45e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.16.73:53068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068647, "uuid": "30301430-d45e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.150:55741/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737068707, "uuid": "54536cdf-d45e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.81.242:49643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069127, "uuid": "4e5c2aeb-d45f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.245.2.63:48383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069263, "uuid": "9f9bc1ec-d45f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.100.27:48017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069426, "uuid": "00ee63d2-d460-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.184.33:41449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069547, "uuid": "4894a9c2-d460-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.29.99:37231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069563, "uuid": "528ed26b-d460-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.147.190:43717/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069564, "uuid": "52ba6e33-d460-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.85.144:37583/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737069967, "uuid": "42d9572d-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.30.83:33581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070085, "uuid": "89aeb2e0-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.191.76:51581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070085, "uuid": "89c399b6-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.88.126:49980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070086, "uuid": "8a0f88a2-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.189:46682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070209, "uuid": "d39208bb-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.16.73:53068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070211, "uuid": "d46cf65f-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.129:52854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070247, "uuid": "ea2bb083-d461-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.230:40998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070329, "uuid": "1aea4262-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.165.90:60831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070388, "uuid": "3e2478d4-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.81.242:49643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070389, "uuid": "3e978ba7-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.245.2.63:48383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070390, "uuid": "3f5d5d72-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.38.102.233:2086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070464, "uuid": "6b1ad5b9-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.100:50038/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070567, "uuid": "a8a442fe-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.100.27:48017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737070686, "uuid": "efd046f5-d462-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.245.153:43467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737071165, "uuid": "0d65ff07-d464-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.189:35522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737071286, "uuid": "5510f1b4-d464-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.176:44965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737071407, "uuid": "9d2ed4e1-d464-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.99.196:50263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737071467, "uuid": "c1306632-d464-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.58.168:41656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737071647, "uuid": "2c61e3c1-d465-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.129:52854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737071765, "uuid": "72a24563-d465-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.165.90:60831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0624407-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.107.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009784, "uuid": "2362005e-d3d5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.18.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003543, "uuid": "9b87048c-d3c6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.12.118", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003844, "uuid": "4ecca461-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.143.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053644, "uuid": "41e030c3-d43b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.180.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737029045, "uuid": "fb758742-d401-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.9.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "312bd204-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.35.235.124", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051484, "uuid": "3a7d5138-d436-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.132.19.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220f9b7d-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.111.120", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "3126e51b-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.117.120.68", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26afe8f9-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.40", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf1030f-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf15390-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.104.99", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26af2559-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.230.186", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf1a717-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.210.101.200", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986514, "uuid": "f51034dd-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.86.182.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051544, "uuid": "5e39a46f-d436-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.41.47.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737042724, "uuid": "d4d0bafa-d421-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.56.138.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737033484, "uuid": "5198983c-d40c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.179.125.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f064e580-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.238.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058563, "uuid": "b5e3bad9-d446-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.186.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736991963, "uuid": "a503361b-d3ab-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.138.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043444, "uuid": "82125c0f-d423-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.116.207.172", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002705, "uuid": "a7f92fdf-d3c4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.15.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737037867, "uuid": "85db047f-d416-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.26.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054844, "uuid": "0cef7d82-d43e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.251.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046084, "uuid": "a7a81624-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.77.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737049264, "uuid": "0f2a9b18-d431-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.24.146.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053462, "uuid": "d59fcc1f-d43a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.25.220.83", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035164, "uuid": "3ace606f-d410-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.105.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220d9008-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.244.221", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470e532b-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.25.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014644, "uuid": "73dd2804-d3e0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.5.108", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737056523, "uuid": "f61fdcbb-d441-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.45.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015544, "uuid": "8cb1f980-d3e2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.69.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737065706, "uuid": "574d27cc-d457-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.123.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989084, "uuid": "f10ca2e9-d3a4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.191.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023883, "uuid": "f725f6eb-d3f5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.26.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048124, "uuid": "67cd5d38-d42e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.11.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737039363, "uuid": "01dcc5db-d41a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.138.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006906, "uuid": "6f94bb7a-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.223.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027723, "uuid": "e7f3d1cf-d3fe-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.244.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018184, "uuid": "b2304f85-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.253.105", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059408, "uuid": "ad335ec9-d448-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.152.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014644, "uuid": "73dd3d65-d3e0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.120.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736990763, "uuid": "d9d40be6-d3a8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.121.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737044343, "uuid": "9a47631f-d425-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.184.192", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057484, "uuid": "32da30c5-d444-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.236.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737049384, "uuid": "56a7d155-d431-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.55.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0836ce0-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.55.78.203", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059763, "uuid": "81109b9d-d449-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.72.222.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006963, "uuid": "920c4f88-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.238.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046144, "uuid": "cb459425-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.35.185", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998445, "uuid": "bcd8e94d-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.57.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036844, "uuid": "244ea437-d414-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.168.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003785, "uuid": "2b5a7024-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.168.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736992983, "uuid": "054e4fd0-d3ae-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.130.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000124, "uuid": "a59133e8-d3be-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.135.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048610, "uuid": "891771b0-d42f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.141.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737070207, "uuid": "d1ee10fc-d461-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.165.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996646, "uuid": "8c33e775-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.166.248", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027245, "uuid": "cb003936-d3fd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737069544, "uuid": "46d39870-d460-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.147.190", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067804, "uuid": "3a146065-d45c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.162.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988544, "uuid": "af3274b6-d3a3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.46.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020045, "uuid": "07930a17-d3ed-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.181.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004444, "uuid": "b4224ea8-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.85.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf0344a-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.94.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053884, "uuid": "d0d500ef-d43b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.16.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737068584, "uuid": "0aba6b0d-d45e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.16.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736997606, "uuid": "c86f500d-d3b8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.185.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017705, "uuid": "94a3ec05-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.28.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737029946, "uuid": "14ba4f71-d404-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.30.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26b0c60d-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.73.139", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012844, "uuid": "43618121-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.223.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052445, "uuid": "777ccfaa-d438-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.113.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998744, "uuid": "6f0fcca9-d3bb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.113.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064984, "uuid": "a8de4db0-d455-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.118.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737033244, "uuid": "c25a1a8f-d40b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.118.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050344, "uuid": "92f3f6d2-d433-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.118.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000184, "uuid": "c92cc531-d3be-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.122.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737056763, "uuid": "84ecdbbe-d442-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.17.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001206, "uuid": "2a420f15-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.238.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf128d4-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.238.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006244, "uuid": "e535f620-d3cc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220e01fa-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737070207, "uuid": "d1eba355-d461-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.25.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737068524, "uuid": "e6f1f79a-d45d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.30.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470e0cdf-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.32.116", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736997307, "uuid": "1670c30f-d3b8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.37.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737040743, "uuid": "3852a10c-d41d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.43.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736991183, "uuid": "d468893f-d3a9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000243, "uuid": "eca4c666-d3be-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.17", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003785, "uuid": "2b5a80b6-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048843, "uuid": "1487a2e0-d430-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.175", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008824, "uuid": "e70364c4-d3d2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043444, "uuid": "82124a47-d423-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737064505, "uuid": "8b6a4b69-d454-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.211.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736997307, "uuid": "1670bd53-d3b8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.146.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737037323, "uuid": "4205198c-d415-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.118.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067804, "uuid": "3a1423c4-d45c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.240.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737038045, "uuid": "effede01-d416-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.252.109", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013206, "uuid": "1b0df445-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.60.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf1c890-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.253.157", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737056643, "uuid": "3da22947-d442-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.51.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737055623, "uuid": "dd7553f1-d43f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.51.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013743, "uuid": "5b42c39c-d3de-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.54.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011884, "uuid": "0731e374-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.56.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996944, "uuid": "3dbd4fb8-d3b7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.56.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737032105, "uuid": "1ba2e343-d409-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015544, "uuid": "8cb1ff7f-d3e2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.60.145", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051064, "uuid": "3ffc8d8b-d435-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.61.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028262, "uuid": "2917a33f-d400-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.61.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066544, "uuid": "4abb12f3-d459-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.66.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737044105, "uuid": "0c46bf27-d425-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.140.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737056044, "uuid": "d8692c10-d440-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.32.83", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995684, "uuid": "4ee8cfb5-d3b4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.34.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001206, "uuid": "2a42186a-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.116.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041645, "uuid": "520a79a6-d41f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.117.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995506, "uuid": "e503abf3-d3b3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.118.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048963, "uuid": "5bd72357-d430-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.37.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034444, "uuid": "8ddfce58-d40e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.56.233", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998208, "uuid": "2f50db05-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.119.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048670, "uuid": "acda6249-d42f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.116.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737047284, "uuid": "72fc5ada-d42c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.117.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737047944, "uuid": "fc92a314-d42d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.121.56", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017584, "uuid": "4c92ee1b-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.127.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989265, "uuid": "5d324f54-d3a5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.253.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737070445, "uuid": "5fca460b-d462-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.4.100", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737069245, "uuid": "9481d29f-d45f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.100.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737055144, "uuid": "bfcf03d0-d43e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.101.246", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005824, "uuid": "ead37b3d-d3cb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.106.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009484, "uuid": "708a8c1d-d3d4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.116.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26b0e7ea-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.118.211", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024844, "uuid": "33ae699f-d3f8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.126.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004864, "uuid": "ae8d49dd-d3c9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.146.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028023, "uuid": "9a9838fc-d3ff-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.34.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996763, "uuid": "d265c713-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.194.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009724, "uuid": "ff534b20-d3d4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.214.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017705, "uuid": "94a401b4-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.214.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220dc4b5-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.214.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988783, "uuid": "3dd23852-d3a4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.104.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985784, "uuid": "42727218-d39d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.24.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018184, "uuid": "b2303853-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.26.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008107, "uuid": "3b68c537-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.103.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012244, "uuid": "dd8fefe8-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.107.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035164, "uuid": "3ace751f-d410-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.12.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062284, "uuid": "5f86fe85-d44f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.159.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035164, "uuid": "3acdef79-d410-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.167.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009248, "uuid": "e3b8b101-d3d3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.169.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003844, "uuid": "4ecca720-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.174.43", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011044, "uuid": "1236e31a-d3d8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.220.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994611, "uuid": "cf6250f8-d3b1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.232.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26bc92bf-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.239.0", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737029045, "uuid": "fb757dab-d401-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.8.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043984, "uuid": "c3ce6769-d424-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.97.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018184, "uuid": "b2303074-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.26", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034267, "uuid": "246c9d4a-d40e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002108, "uuid": "4436cc1c-d3c3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.173.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737071464, "uuid": "bf6ecfdc-d464-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.58.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012244, "uuid": "dd8e1f88-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.63.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058264, "uuid": "037123a1-d446-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.99.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737065105, "uuid": "f15e4e42-d455-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.60.101.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "312766f6-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.178.235.206", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003724, "uuid": "07218c43-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.65.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736997307, "uuid": "1670f0d4-d3b8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.252.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036245, "uuid": "bef5f1f9-d412-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.240.254", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470e7555-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.138.12.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737059223, "uuid": "3f807aea-d448-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.237.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061143, "uuid": "b7c7e5ac-d44c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.206.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060724, "uuid": "bdeb6277-d44b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.21.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737032644, "uuid": "5ca233f8-d40a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.58.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996646, "uuid": "8c33e36e-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.71.95", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002463, "uuid": "17e1f000-d3c4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.72.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007084, "uuid": "d9e8e963-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.239.227.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f083cb15-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.117.218.251", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470eba92-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.99.43.3", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017644, "uuid": "70418df0-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.212.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063484, "uuid": "2b0ad47e-d452-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.3.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067804, "uuid": "3a1431b1-d45c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.211.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986264, "uuid": "6042f810-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.71.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000606, "uuid": "c50840db-d3bf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.92.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737030906, "uuid": "50cdb3bf-d406-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.185.9.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054844, "uuid": "0cef77a1-d43e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.100.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986264, "uuid": "6042c984-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.188.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737042605, "uuid": "8defb143-d421-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.6.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737033964, "uuid": "6fee3939-d40d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.199.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737029407, "uuid": "d38250e9-d402-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.73.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737068705, "uuid": "52bd33df-d45e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.81.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036245, "uuid": "bef5ec4f-d412-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.10.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736999224, "uuid": "8ced7a18-d3bc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.68.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736990163, "uuid": "7483bf2c-d3a7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.62.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f073b40b-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "129.222.204.191", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "31294c05-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.162.204.37", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0624878-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.255.78.214", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26b87ad1-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.1.218", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0646b49-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "148.103.1.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041645, "uuid": "520a91ec-d41f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.252.101.43", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043143, "uuid": "cebb9217-d422-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.127.53.249", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "3127e1a6-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.238.227.41", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f071c1d1-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.255.22.43", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "312c3757-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.244.24.30", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06ed4cd-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.250.152.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013507, "uuid": "ce4129fe-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "173.0.60.251", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737033545, "uuid": "75b4c01e-d40c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.155.165", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014284, "uuid": "9d67e0ca-d3df-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.140.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737068105, "uuid": "ed874d1d-d45c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.88.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736991245, "uuid": "f90c569b-d3a9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.124.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26afdaec-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737070683, "uuid": "ee2b4c4c-d462-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.245.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736990343, "uuid": "dfbc132e-d3a7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.5.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005468, "uuid": "16a7e81f-d3cb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.163.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008584, "uuid": "58216eda-d3d2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.98.200.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0750f50-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.131.121.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986508, "uuid": "f16ee9b1-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.135.60.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003785, "uuid": "2b5ad903-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.203.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015544, "uuid": "8cb1f1f4-d3e2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.87.34.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736993044, "uuid": "298ce8d0-d3ae-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.87.46.105", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f078d638-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.116.64.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f05fab11-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.119.63.1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26af63a4-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.88.205.210", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000065, "uuid": "8265abee-d3be-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.15.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000784, "uuid": "2ea6fd13-d3c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.200.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737065944, "uuid": "e556b706-d457-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.38.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027423, "uuid": "3531644e-d3fe-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.242.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051845, "uuid": "116aae15-d437-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.250.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002944, "uuid": "3693fb4c-d3c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.50.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053344, "uuid": "8ef9bafa-d43a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.166.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737040084, "uuid": "af6f4c4c-d41b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.12.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058744, "uuid": "21f23e7b-d447-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.43.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067144, "uuid": "b063f841-d45a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.67.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062584, "uuid": "1239937e-d450-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.124.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737016083, "uuid": "cdcb58cc-d3e3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.39.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994006, "uuid": "66e32753-d3b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.6.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737016444, "uuid": "a4fb5ebe-d3e4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.7.69", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001564, "uuid": "ffc75bb6-d3c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.128.71.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017762, "uuid": "b6b8a9f3-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.156.53.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985784, "uuid": "42720497-d39d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.240.211.186", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004744, "uuid": "67486bf8-d3c9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.92.96.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051663, "uuid": "a522fed5-d436-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.199.143.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470e2319-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.111.101.214", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470dd9f9-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.15.10.177", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220de119-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.165.217", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011465, "uuid": "0d29d16e-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.26.147", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035164, "uuid": "3ace504e-d410-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.178.110.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012244, "uuid": "dd8d5b57-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.64.86.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012244, "uuid": "dd8d2cca-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.89.247.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06d5687-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.180.18.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "312bcdc8-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "20.189.117.246", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f078bdd1-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.152.45.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737070386, "uuid": "3cfaaaba-d462-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.38.102.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f05ed86c-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.70.156.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995506, "uuid": "e50378f1-d3b3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.177.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028144, "uuid": "e27dca5a-d3ff-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.93.175.62", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736990524, "uuid": "4b726694-d3a8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.174.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000723, "uuid": "0ac1931c-d3c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.175.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066483, "uuid": "26cbe774-d459-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.192.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051484, "uuid": "3a7d5df2-d436-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.104.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045723, "uuid": "d09fca52-d428-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.58.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996584, "uuid": "675d26cb-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.79.138.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017584, "uuid": "4c92dbf0-d3e7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.237.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048670, "uuid": "acdafe6b-d42f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.249.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012244, "uuid": "dd8c5531-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.191.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018844, "uuid": "3baf6509-d3ea-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.53.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737044223, "uuid": "52c30b36-d425-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.188.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737066364, "uuid": "df4eaf10-d458-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.208.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989684, "uuid": "56837c29-d3a6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.233.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737024546, "uuid": "81ee2fd4-d3f7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.79.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986806, "uuid": "a34f9223-d39f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.183.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007023, "uuid": "b5d2e0ef-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.185.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043324, "uuid": "3a8b04f8-d423-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.231.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061625, "uuid": "d6afd1ac-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.11.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737010624, "uuid": "17c131da-d3d7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.82.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf03099-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.171.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998506, "uuid": "e0cd0a3c-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.244.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989207, "uuid": "3aaf5028-d3a5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.219.13.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737038045, "uuid": "effee385-d416-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.245.2.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737033244, "uuid": "c25a408e-d40b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.110.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027066, "uuid": "601ee9ab-d3fd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.12.189.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737055924, "uuid": "90bcbbc6-d440-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.60.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737009188, "uuid": "c027c4ba-d3d3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.26.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737049384, "uuid": "56a7e2d1-d431-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.72.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737044043, "uuid": "e77e62cc-d424-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.199.241.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006844, "uuid": "4abfe6a7-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.188.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001024, "uuid": "bdd65c93-d3c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.197.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06269c4-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.202.90", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf0e23f-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.32.125", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015964, "uuid": "86e80381-d3e3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.50.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014525, "uuid": "2d020826-d3e0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.237.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017163, "uuid": "51836d6d-d3e6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.224.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057963, "uuid": "501a4e39-d445-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.236.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015844, "uuid": "3f5166bc-d3e3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.24.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987763, "uuid": "ddf5d844-d3a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.85.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003244, "uuid": "e8f6ec20-d3c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.104.223.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06c68e8-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.88.6.203", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737054245, "uuid": "a7d0f417-d43c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.48.155.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013444, "uuid": "a89367b3-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.107.254.213", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012306, "uuid": "024e3e73-d3db-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.142.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057724, "uuid": "c1a9473c-d444-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.151.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053823, "uuid": "acd6269c-d43b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.7.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737039544, "uuid": "6d7c9ab3-d41a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.87.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013743, "uuid": "5b42bf1d-d3de-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.246.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737029045, "uuid": "fb759939-d401-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.101.255", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994544, "uuid": "a791979a-d3b1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.89.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008883, "uuid": "0a718bd8-d3d3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.222.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737051484, "uuid": "3a7d5488-d436-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.25.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26b64d19-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.176.134", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028506, "uuid": "ba3cc103-d400-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.45.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043324, "uuid": "3a8b0cb1-d423-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.232.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737062164, "uuid": "182e2f7a-d44f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.87.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996884, "uuid": "1a7eaea4-d3b7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.233.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060844, "uuid": "058e8766-d44c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.99.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736989684, "uuid": "56843340-d3a6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.153.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015364, "uuid": "211d05c4-d3e2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.188.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003785, "uuid": "2b5aa3cc-d3c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.107.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986744, "uuid": "7e8c9136-d39f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.211.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737053284, "uuid": "6b3a6bf5-d43a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.206.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737028506, "uuid": "ba3dd54e-d400-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.218.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036783, "uuid": "0037303a-d414-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.188.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737068105, "uuid": "ed875cac-d45c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.184.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06bcea9-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.115.252.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0682a61-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.127.223.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470ef7d7-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220dc34b-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985784, "uuid": "42723d8a-d39d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.252", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf0191a-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.254", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26b03de0-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.249.84", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018184, "uuid": "b2302a97-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.251.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996584, "uuid": "675d4596-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.251.236", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "3126818d-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.205.28.16", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f05ef677-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.167.132.72", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043206, "uuid": "f46d1da3-d422-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.183.222.116", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06c7e92-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.60.98.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "3126db64-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.109.90.134", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "31268031-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.128.167.72", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014467, "uuid": "0aa3e8ed-d3e0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.71.70.125", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0606d72-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.197.34.14", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f083d464-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.20.176.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f084c8ba-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.234.182.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f0748c65-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.236.1.180", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986512, "uuid": "f3f646f1-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.239.215.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f078d19a-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.55.20.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "31270433-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "54.83.104.93", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007084, "uuid": "d9e8ffc5-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.217.77.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015063, "uuid": "6de9bb6a-d3e1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.107.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015784, "uuid": "1b56a7ec-d3e3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.145.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737057484, "uuid": "32da114e-d444-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.238.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996584, "uuid": "675d2436-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.68.40", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737069544, "uuid": "46d39c1e-d460-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.85.144", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737065944, "uuid": "e556ff9b-d457-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.106.159", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737056106, "uuid": "fd56950d-d440-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.115.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737048843, "uuid": "1487d01f-d430-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.117.0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998445, "uuid": "bcd8ff14-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.117.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26af8862-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.128.180", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf0f524-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.130.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014704, "uuid": "97c31fa0-d3e0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.132.159", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737050584, "uuid": "220ed1ad-d434-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.142.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737044405, "uuid": "bee4300d-d425-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.241.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045245, "uuid": "b3bc413a-d427-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737030906, "uuid": "50cdbff8-d406-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.48.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736988544, "uuid": "af336e9e-d3a3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.11.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736999344, "uuid": "d475ff85-d3bc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.146.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737065944, "uuid": "e55691af-d457-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.152.8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998445, "uuid": "bcd8ea30-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.17.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737000424, "uuid": "5875786b-d3bf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.33.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052507, "uuid": "9c1c1d57-d438-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.9.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737049744, "uuid": "2d1bd5bd-d432-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.226.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007864, "uuid": "ab0cf392-d3d0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.226.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736994184, "uuid": "d0d5f367-d3b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.229.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736998506, "uuid": "e0cd05ae-d3ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.182.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052624, "uuid": "e1beb9e8-d438-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.91.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020406, "uuid": "de87f67b-d3ed-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.47.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737032644, "uuid": "5ca22f2e-d40a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.47.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052683, "uuid": "055d4a1c-d439-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.86.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf070a5-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.87.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737006844, "uuid": "4abfe12c-d3ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737065283, "uuid": "5b828794-d456-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046383, "uuid": "5a40dfd0-d42a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046563, "uuid": "c58f0150-d42a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737069544, "uuid": "46d3b3ac-d460-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.29.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003005, "uuid": "5accda45-d3c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.248.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737027423, "uuid": "35314c71-d3fe-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008044, "uuid": "1647411a-d3d1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003244, "uuid": "e8f6f994-d3c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020045, "uuid": "0792f29b-d3ed-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018305, "uuid": "fa728809-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058563, "uuid": "b5e3c8f1-d446-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf27d38-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.193.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003124, "uuid": "a18b20ef-d3c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.196.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005704, "uuid": "a3a1864c-d3cb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.213.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007384, "uuid": "8cf043e6-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.215.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737043862, "uuid": "7b74e119-d424-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.215.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004206, "uuid": "26b0051d-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.216.41", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737001868, "uuid": "b4de9e1d-d3c2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.217.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737008464, "uuid": "1056b39e-d3d2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.5.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737070325, "uuid": "184b4a63-d462-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.16.165.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737025384, "uuid": "7579d985-d3f9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.161.24.4", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026284, "uuid": "8de05a0c-d3fb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737007208, "uuid": "23967acb-d3cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737002763, "uuid": "ca69c0ae-d3c4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.238.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737005105, "uuid": "3e820c4b-d3ca-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.182.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737035344, "uuid": "a602ab20-d410-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.185.151", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737060183, "uuid": "7b9b1d4a-d44a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.186.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737063364, "uuid": "e36d54f0-d451-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.210.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012844, "uuid": "43616d85-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.214.205", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046144, "uuid": "cb459c39-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.221.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041223, "uuid": "568c5a68-d41e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.99.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736996763, "uuid": "d265231a-d3b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.231.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470e9599-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.235.24", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987763, "uuid": "ddf5beb2-d3a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.247.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986516, "uuid": "f67e1796-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.204.250", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736985963, "uuid": "aca1ea8d-d39d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.166.60.207", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06c0929-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.242.241.75", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737017406, "uuid": "e2375676-d3e6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.233", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737018124, "uuid": "8e4cdcdb-d3e8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.16.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737058863, "uuid": "68cca881-d447-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.21.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737061384, "uuid": "470ef50b-d44d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.27.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052563, "uuid": "bdae22cf-d438-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.29.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986264, "uuid": "6042d3ed-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.90.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737045964, "uuid": "6002686c-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.193.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737014105, "uuid": "32d8f11e-d3df-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.203.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737023645, "uuid": "690a1186-d3f5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.171.17", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736987044, "uuid": "31271170-d3a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.229.89", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f05dc63a-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.110.65.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06c1e39-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.145.51.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737020406, "uuid": "de87efce-d3ed-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.177.233.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f074bd95-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.51.14.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736995024, "uuid": "c5929d17-d3b2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.103.132.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011465, "uuid": "0d2f0ad1-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.31.47.24", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f084d5e3-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.94.170.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737019743, "uuid": "538f9c27-d3ec-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.112.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986514, "uuid": "f513d879-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.9.115.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046743, "uuid": "30c44d38-d42b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.21.209.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736986506, "uuid": "f06c31e3-d39e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.117.8.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011465, "uuid": "0d241029-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.35.88", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737039423, "uuid": "258af7c7-d41a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.244.139.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011584, "uuid": "544bbd35-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "99.216.29.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011465, "uuid": "0d441752-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "activetykes.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012066, "uuid": "7365bfde-d3da-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "adventurevault.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034144, "uuid": "dae1653a-d40d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "arting.ee" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013507, "uuid": "ce9bf06d-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn.glitch.me" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013507, "uuid": "ce61dad5-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "christinadudley.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737003664, "uuid": "e3bb2a35-d3c6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "corepatchcraft.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041044, "uuid": "ebe707d2-d41d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "e1.foiloverturnarrival.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041044, "uuid": "ebb2d5ee-d41d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "edidos.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067505, "uuid": "87eed49c-d45b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "eiesoft.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737067264, "uuid": "f803738e-d45a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "eprimemart.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013444, "uuid": "a8b55e56-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "f.uguu.se" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041407, "uuid": "c40c1c30-d41e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "f1.foiloverturnarrival.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737011465, "uuid": "0d4bf34e-d3d9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "fixazo.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052212, "uuid": "ec5af3c4-d437-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "gh-hr.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046084, "uuid": "a7d105e3-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "goaccredited.biz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046084, "uuid": "a7bbcf27-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "hardcorelegends.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013444, "uuid": "a89eb05d-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "hubasur.altervista.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737015123, "uuid": "91da8a41-d3e1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia600805.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004207, "uuid": "2741502c-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "lojadasmetas.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012669, "uuid": "db1a82a0-d3db-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "luxeway.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737034213, "uuid": "03e07ffd-d40e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "motel6lax.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046084, "uuid": "a7c649f4-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pucchiswelt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737052213, "uuid": "eca21301-d437-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "servivemirctosoftliveanble.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737004207, "uuid": "26e0f9e2-d3c8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "situacaonssprj.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737041044, "uuid": "ebb349aa-d41d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sparticus.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737046084, "uuid": "a7b5d204-d429-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tekascend.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737026344, "uuid": "b20b8fa1-d3fb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tracked-dosage-deeper-verbal.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737013509, "uuid": "cf614d13-d3dd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tree1.a.pinggy.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737036065, "uuid": "53f57faf-d412-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.janroe.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737012965, "uuid": "8b7b11a0-d3dc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.volareconsultoria.com.br" } ] } }