{ "Event": { "published": true, "date": "2026-04-08", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-08", "timestamp": 1775693725, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "68b186a5-211f-4c70-8eeb-b0044a546fd6", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eed0d59b-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775606420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606420, "uuid": "5489f4dc-a7cd-488c-bc86-d0b007ffc7fb", "comment": "Malware payload", "value": "a66d12444a04436b2a55647bd7dc9ca0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606420, "uuid": "44666185-c06e-469c-9af4-7babebc4b0ed", "comment": "Malware payload", "value": "60769cc0da4aadd603ade2a30ce4791595a43f9727e248a232ee7b6a1ae3fc44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606420, "uuid": "cface534-e822-47b1-a6b7-e30a6fb01c3c", "value": "T10DF33B13B7114FA1D75AA6300BF385975AE6259627E2C8D5D76CCB203F503983C2FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606420, "uuid": "c35afbb1-c398-4c66-a3ad-5e38309e5cc2", "value": "3072:rSndj6tzJBpS3uGCLvPHih5twZ0r3z/7HDPLXeVpjoh5i/VctlcIrp:WndOVJBs3uGUHiVg0r3z/7HDPLXeVpjU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775606420, "uuid": "5e75f2b0-f894-4b17-b51e-48cd7c61be07", "value": 171608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606420, "uuid": "6193ba45-6c06-44d2-a6ce-abe97dfbe4a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef3eaf00-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775606420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606420, "uuid": "6f7dce26-7ace-4d7e-ac5d-da0ca3f88c83", "comment": "Malware payload (Ngioweb)", "value": "310c9a2f84d67af11e1a85bbef1fc23a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606420, "uuid": "b07bec99-0012-41a4-8adb-83d1c1bde5fd", "comment": "Malware payload (Ngioweb)", "value": "8de4542b0cfef62851ecb166feac5ff4b0f58951e83f0e914ffe7dae90e6fed5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606420, "uuid": "483881f8-bfb5-4673-910f-2f9eaea5744c", "value": "T11DC31892F9909B45CAD06A7EFF8D538D331317B8C2EEB106C9155B2436CB58A0F7A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606420, "uuid": "23c033fa-9eb6-4594-b7a9-f4aeed901131", "value": "1536:w0xuUCuAdeywHCB+Dyc4sLOtApGwJV3TkOo7POA3F+G6NKBOImM9kguCnAArwxYS:w0hCqywiBeCwzk/OrGvJxrPfo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775606420, "uuid": "a7175965-722d-4c30-b50e-8ba5e030a1ea", "value": 124320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606420, "uuid": "cd474818-5af8-4778-807b-555d06d2e1dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775607427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607427, "uuid": "d33b7145-a0c6-4764-8d5e-90ba03f70b9d", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607427, "uuid": "8fe771c7-10ce-4584-abf1-026b71821b24", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607427, "uuid": "99b93597-7c67-4b29-89cc-876b20b3b497", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607427, "uuid": "e31dd032-c72d-4cbb-8ac8-20e5e8c5f666", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775607427, "uuid": "bafd36f3-599e-4271-9896-541bb7babb28", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775608747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608747, "uuid": "00007375-ece5-4c58-b698-9c419522b055", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608747, "uuid": "3f8ffa66-d453-4db1-9e93-0d7c857dcf79", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608747, "uuid": "b90b5698-2f3a-430f-bb72-e5ba409a7d76", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608747, "uuid": "661a73f1-16ab-4b4b-a636-ed321a9795e8", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775608747, "uuid": "9c0c551b-105e-4aa6-b268-37382ddafd24", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775611396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611396, "uuid": "c9c53736-05b6-46d0-a136-b902837b4a4f", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611396, "uuid": "6fbaa7ec-744d-4005-bb8f-ccbc7b969d9d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611396, "uuid": "b82139b3-0ed1-47d9-8a30-e004dc907b04", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611396, "uuid": "9a1dc7bd-f8d3-48c0-9345-ed1dc79eab58", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775611396, "uuid": "9c47de1f-3d73-4214-9ec4-cc5051d358d9", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57500896-32ea-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1775611749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611749, "uuid": "32093807-913d-42a0-b0ab-ff6d57eeaa83", "comment": "Malware payload (Amadey)", "value": "8d1688952f54d26ad86f9b612f45138f", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611749, "uuid": "15366141-294b-4770-8eb0-38a5a0ba1171", "comment": "Malware payload (Amadey)", "value": "7f3a51d0624ebf838a483be1e6e463702f742e21e64548a0de99845270647965", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611749, "uuid": "a30e2a17-1ac9-4ee3-ba01-8703349b9384", "value": "T15D371227B395127DE07B423689B2D231D6377C1167268D8B87E4295DDF3B2A02E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611749, "uuid": "fb8b0fbb-2cc3-43f7-b64f-a012c26baa0e", "value": "5175da4b99d292f751a152b8e78310d6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611749, "uuid": "68a45e52-530c-4b7f-9bec-049ab09df25a", "value": "393216:+Eba1Fdq1B7wgZHsoqEbpibx2x7JFO7nE6p1XioJRa:Tba1Fg1Jnlbpdx7JFOVplioJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775611749, "uuid": "cd9e8c24-fc3c-4065-8252-0b7e7eeade83", "value": 22842880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611749, "uuid": "84568bf7-9835-45c9-a063-7dfcc8280a39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "288d1232-32ec-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775612529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612529, "uuid": "9e99b7c3-3681-46bd-884d-de63095a37f8", "comment": "Malware payload", "value": "df7cd7aab7e430457ff139d6554ee996", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612529, "uuid": "ad80baeb-c121-48db-a1c2-41d021ba94cf", "comment": "Malware payload", "value": "85ea9fe2595f5870e4eb64fb7f34e4b708f0c98916ae99d631c884bdeb1bfacd", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612529, "uuid": "2e707153-ac91-41d3-aaa7-61045afbfc60", "value": "T14FD097D386630270407A4941F0DA705870040B3F6C408F29BA6364302F85304F5C03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612529, "uuid": "2c657a1c-cb5b-4caf-9bee-62da8584535c", "value": "6:hTEdlfJkrpIJ0jcr8bAulNXYq4HvXDG+NjVsNXYrkJ:VEdlereJ0jcrIPiq4HvXDGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775612529, "uuid": "80b4d95f-d0f2-49bd-89a5-11f702a52b05", "value": 263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612529, "uuid": "63110e54-e493-4df0-a372-c7feb7346ea4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f4d0e7-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613608, "uuid": "c8e384de-3e8e-48ca-974f-337fb92d4148", "comment": "Malware payload (Ngioweb)", "value": "c1371a58bf70f14fc2897dd53d7680e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613608, "uuid": "a26fd2c4-5141-4529-8442-1508ae67b1a0", "comment": "Malware payload (Ngioweb)", "value": "25756bd4d6028d9402d02e00f7ac00bf2b23c64e420efa4be01cd965c0594b9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613608, "uuid": "01439653-f597-4c3e-9bbc-3040d8ca4903", "value": "T1B483DFADF3E66D0ED894F73D3711A4D50810FE3FFAEDDB0A691074BE662C5281A212", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613608, "uuid": "9e1591c4-70dc-45fd-99e7-eee1476428fd", "value": "1536:0O9zgt/ZsCbbIlAe2jarx5/trjUMPKHZOgO/TbFoTgFEWsRTJr94+L9s:D9zgt6me2erDtrfggFo0iWsl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613608, "uuid": "2fb850ac-087d-4a87-85b1-ecc738236cdf", "value": 88160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613608, "uuid": "cb4965bb-4895-4042-8c57-55608aa6dd22", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6e86f32-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "1836e7b2-e82f-441d-b91d-138d359baa84", "comment": "Malware payload (Ngioweb)", "value": "e381d5a1e8bfd89acb4ce28198175ae6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "3a22891f-10e1-49ef-8435-02aeee3cfcdb", "comment": "Malware payload (Ngioweb)", "value": "f85ee1500347ab1ae9061973abf387be54a98ad1259f5265965d5b067c170923", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "04357322-4b1b-4649-a5f2-a150fd9899cd", "value": "T143B37D21F9C445FEE1945E300B0FE30B8539F4859525FBEBD2E88FA26926E11173DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "ff12e2dc-1ce1-4562-b944-8a1b75388008", "value": "3072:OsoTfJB7wpIi82aBRKuJrLhP2+tjoZyP8k2K:OsoTRBsyXRj3B32K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "9800341a-e00d-4ef5-ac38-6ce4e96b73a0", "value": 107776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "740122f9-7ab9-4e60-9719-da104283d5d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f2416a-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "6ac930c6-81ff-4793-a68e-a6b15eff7e32", "comment": "Malware payload", "value": "62b6a79fad0d7a787ef933c7fe5fa57c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "276c5e15-c4f2-4540-815b-944fdbf69886", "comment": "Malware payload", "value": "5df36281969dcd0fefdc2f7bda8af95577826634311f5a82544002e7e7d4c0fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "3091347c-1f03-48f9-a72e-cb73cac426d2", "value": "T1A4D34B13FB0C09A2C2861EB05D3B07E283A6041545B9F31D590ABF1B5E32E3B65DBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "323e2a47-bd1c-4f6f-a115-03621dc5f133", "value": "3072:QuA6hg2eu7SZGPkgNp6Cx6v+pMBieNwaKQZpYsxX25pR:j+2eu7SZqbp6C0v+pMBi6waKQZpYsxX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "66e8c0db-6374-44d4-ad60-96ba45c30c8b", "value": 132452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "b465f55d-af7e-4c90-914b-c68ebeff59a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f84505-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "0dcd9d88-e112-43d2-af9c-80894408c5c8", "comment": "Malware payload (Ngioweb)", "value": "68d01525007758eabdc25bde6d5fb4d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "58e294d4-0a3f-46d9-aaec-6b2122a3e265", "comment": "Malware payload (Ngioweb)", "value": "6a9a2fd72c6dd58658f09a6743885605c77be428948c72d6a4539e3982e67418", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "3b0c0653-cf74-4fbe-8cab-5040c0b473a2", "value": "T1C1C30892F9809F45C6D02A7EFF9D538C332317B8C2EE7406D9155B2466DB5CA0F3AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "b20c223e-d69e-4005-a82c-85b5f492dd71", "value": "1536:+wBE/HWUSR2krHiE/BsuF7uKFHZA7Hs1NifBXuyfgBHv+nIIam6WUMNk4TPPrKio:+wAHWz/79Fi0AptuHkepyQqCu8YMYI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "4a202c0b-10de-42df-80c5-e1aa3bb5a7e9", "value": 128424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "93bda018-3136-4713-b38b-373193ddaaff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6fc5ee5-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "4fddfa8c-703a-4e85-a432-1c6e8f1df679", "comment": "Malware payload", "value": "835955a3843d45e6e6186e11adbe3c43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "88cf4ad4-bd1d-4ddc-abc4-2fea6d62b081", "comment": "Malware payload", "value": "7524f7123eb049207efa4dac91e7d0a4726016d1a992a53468c54a4829658dbb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "02f3cf69-1a63-40a1-b9b5-1f61c846aff6", "value": "T183C32A90BE68BC70C0042E3BAE7A875437574A958DE2F058C551E38FFFC76506E984", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "d3acff59-2491-446b-b5a7-22a0ad6d4bb8", "value": "3072:kk8phEfUPjrVPZSb7Nwk/pFJPkU8aGPx80nb:L8YUPjuDxPkBPx80nb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "a9822c57-6c0f-4c3b-b7a5-258a1cbad421", "value": 128424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "ef9425f7-1f61-400e-95df-e29bb67398cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f49811-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "0f911ffe-5ab8-44f5-b990-4911ee774a88", "comment": "Malware payload", "value": "720d813057868ec904ea57966eb0132f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "3a954b5f-1190-4a35-89a8-e94a545b6c14", "comment": "Malware payload", "value": "3dd83802e4a3c71b8a7a03cd7b065fbd7b9eec3ebae5e0c29d4fc09573409ed2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "c63540fc-3f66-4016-b697-66c6122eb36b", "value": "T188F36C93738A1BE6CB675B704FF74926ADD9260103F3C4AAD772AA5007952E43C1ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "8d4696de-ed17-4757-ae9c-93c88ee67143", "value": "3072:FPJt0NhPO3YhLQfhnJQP+AfmkC0zqmAXKqGz:FPuPO6LQfhKP+AOkNUKD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "b25b74f8-f81b-418a-8aa5-21bb68a2cbfd", "value": 157984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "56d83ca0-6633-4363-b346-490dd6abce96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6e81cca-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "a1c6ce55-1f9d-42d1-b127-bac9d803dccb", "comment": "Malware payload (Ngioweb)", "value": "d8361574b8b46dcb48cac656396c4f7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "6a04dfa3-ceea-42fb-aaad-94a9786c73bd", "comment": "Malware payload (Ngioweb)", "value": "acbb357150d464f678cd23159fca36575c8039f82ef9f276ef298361f8415dd5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "3658bf43-7a9d-41ce-ba2e-163271f21794", "value": "T176C30892F9809F45C6D02A7EFF9D538C332317B8C2EE7406D9155B2466DB5CA0F3AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "23be26eb-64f9-451e-b3c0-0d270cb9a078", "value": "1536:+wBE/HWUSR2krHiE/BsuF7uKFHZA7Hs1NifBXuyfgBHv+nIIam6WUMNk4TPPrKio:+wAHWz/79Fi0AptuHkepyQqCu8YMYI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "3c075c48-4f91-49fb-811d-2b1b8cc4af08", "value": 128424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "f44b8f2d-ae43-4089-9657-922a52917ce2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c585745b-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "41230b07-4753-49ad-8d0f-6c1217fdb1cf", "comment": "Malware payload (Mirai)", "value": "c90055e53507ef4e0e50ff032dd2117b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "43f139fd-991a-4fc9-ac43-46613755167e", "comment": "Malware payload (Mirai)", "value": "cd6ab1ae78b810d0840c64270a6506a753befecad64eace6c1101e2a2713574f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "cde668bb-0a47-4e68-85cc-e98c0143acd6", "value": "T11A14D70A6F618FADF679C7354BF74A24E7A862D613E2D545D2ACC1101E203CE5C1FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "f4c90397-6265-4a25-bc4b-b9a6f26fb534", "value": "3072:7fltNgPsnpXTGOsydlx1hJTxC1cfFR2WaWmr6rYji:Ng+VGPynx1hC1cFa7r6sji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "1ca7c1ac-6cd8-4e27-90d0-bb2d058be137", "value": 205024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "20afa341-1ded-4189-9140-ec5273f44cd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f4eed8-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "a89813b3-7fa5-421b-868a-3915036b01f1", "comment": "Malware payload (Ngioweb)", "value": "397aba52f8fbce51521758597976978f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "da2914ff-0338-4fc5-b9a2-c54ddaa81dff", "comment": "Malware payload (Ngioweb)", "value": "d328a8df797e9a5c3c2f282b014f7cf538e141143a3054cdb542ca360d43b624", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "5b73111d-4720-48c6-ae28-1934a0d34223", "value": "T137B36B07F9C444FEC4D5E1708B9B8217E537F0D452387BAB62A98E622E26F305B2D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "0768599d-c467-426c-8725-6cc541bca1e8", "value": "3072:YCpskAEtwyUzLrglUHz05jo+00lOpoEOMYJKx:YCqkAEhUP82ARRshYM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "ac478519-16ea-4bd4-a3cc-c8c8fa5ed4b7", "value": 108024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "abb71c0e-36b9-4f2a-806e-f1d5714e65eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5609188-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "97a9966b-dc33-4f20-9641-82d01c60f309", "comment": "Malware payload (Ngioweb)", "value": "f2f1efa13a1580c7a6d0a61698fdcc02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "42f9d455-a54b-471e-9e82-21f505baa539", "comment": "Malware payload (Ngioweb)", "value": "fc43bc3a09d3d47a1fa0ed5559d8d98468c07e768daf9bf1f806984b342e4aa0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "ea7237d0-375f-4d31-8ed0-d9906fdb233b", "value": "T182B37D83EBD7C0F1EC960A761117D72B9732A829646BEF8BF7991C11AD91302421F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "8f6b9d8a-4942-4248-8b38-ccaa29b22630", "value": "3072:/hFPZ+jsiDL42RwWHsCOQ4pOla8ZuMjSoY:/nPesiF7MgBlHuMO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "e8e50253-9774-42ca-8121-b00cdfb381a6", "value": 111916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "61f97e9d-fbfa-4c30-b6f4-cbcfd45b4e1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c70c6516-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "58b28750-cff7-4f55-b75f-1c8f1e1e0515", "comment": "Malware payload", "value": "c28ede49e0f16539a1fd6e3c5e588287", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "5df4da41-da35-4efb-b93f-54979b3eee44", "comment": "Malware payload", "value": "f89836639ef62ae6f317f834fab00e166ef668772b021e5e468969bd66aa4ef1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "45dba0df-d670-436a-827b-3bfe768c9d78", "value": "T165142A11EF1AAE3BCB6416F185371B60C79548A50474E6217B013A6A1FB373F68CFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "5b49ac73-be31-4988-945a-aa5b092b8bc7", "value": "1536:bGWj+hWcNbEMfVG5diumMRLleDd9BUFLuRudbEuPlh1gwQ/SxhdxphUAo4T:Kg+cy2Iu7eJ9BUFLuRG4uPlhHthhhW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "c9072e4a-0eee-4235-abc9-1b240a52e3cb", "value": 198200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "44c3050f-0954-493b-a575-6c763d54bc7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6edc3a2-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "98ec042d-b8a8-4e40-84b0-5e1f418f0847", "comment": "Malware payload (Ngioweb)", "value": "96975cde1d8d6adeb8ec9396f10caeb6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "310fa527-4e61-41f5-83bc-687bd72659cf", "comment": "Malware payload (Ngioweb)", "value": "1bea422550db39a211f644ad63eeb34bce2ae9a70b39d6c38d1b423203f619d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "026bf6e4-a220-457a-bb72-c84219e7f2f1", "value": "T1FFD3F896FA809F46C5E03A7EFF5D238D33131B78D2EEB505CD259B34639648A0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "91925515-9d56-4062-ba02-4268293ef1bb", "value": "3072:qqqWJGjsWcnKiiqLrho5kb7ShqKy0Tz5zv0NMGgZa1:qUgj7cnKiJ9oKb+8KySRv0iZa1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "4170a38f-b0a3-4e76-a523-da16c5642d62", "value": 132520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "d775f4dc-c9d2-4a9b-9330-22fbffab981b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c57ef4f5-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775613613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "b38c3106-8f29-4a82-921d-eda86e29e0a1", "comment": "Malware payload", "value": "c44eec70ce2841997012f91a28cc62cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "2124f6c4-0824-45b2-a5c0-dd2cf2b70f2e", "comment": "Malware payload", "value": "202d1e3eccffe6ac67e54882c0e070f8a4730d5e117ed52043e4ad294ec857db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "596e8d22-a3ff-4a33-bc55-e68cff2e7141", "value": "T1D5148222A344B799CE467C3B56CBFE41739A71D4025081627A10634EDBBA72BCF0EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "81738fcf-35d2-48e2-9a7c-6781004aa4c1", "value": "3072:rHvZLOQdJ0vUV7Hpq42dWSSLgkKpArmnsUSOdJ7ZyUlT8T2T7:rHUQdJ0vUNqWSC5dKnVZyUlT8T2T7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613613, "uuid": "ac6e3b8b-456b-4b1d-98d8-f6ae307a71ca", "value": 198200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613613, "uuid": "cb064d68-5f7d-412d-a244-50575ec27c28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ea37e9-32dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ngioweb)", "timestamp": 1775613620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613620, "uuid": "4aa153d7-88e2-4c2a-af04-ca8ecbe1d614", "comment": "Malware payload (Ngioweb)", "value": "b610896824fcddf861f9956cadac2f00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613620, "uuid": "257763ff-2538-4621-8bdd-67098e511a83", "comment": "Malware payload (Ngioweb)", "value": "b89e0bddab26ae722e8af161ab726eb7f25232f00b3cbdc0e6cad665513047df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613620, "uuid": "fdf733af-b68b-4238-9276-47082767f95e", "value": "T1E2C3F791F8509B55CAD06ABDFF8D538C331317F8C2EE710AC9149B3476DA98A0F3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613620, "uuid": "e9c2866c-1af4-4a79-be97-fac895b77af3", "value": "1536:uY63yECoeUkVbVVIi8HZ/SFcpZ1dGUKjoGvDJ9/FHvBy3BL/OMNkQTHUhwzhOglm:uRzNxw8i85/QSn8LJsHHUoOUwJJsumM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775613620, "uuid": "0a31d0d0-70b3-4497-b9b1-c6b8920d60be", "value": 129120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613620, "uuid": "93bc7982-8462-4c5f-abb5-4e2ab612392b", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775614627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614627, "uuid": "3cfd9173-686a-4f77-8559-858ee2057a23", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614627, "uuid": "5322f1d0-7c20-4a61-ae03-0bb0900848da", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614627, "uuid": "30aaf705-e4c3-4f28-a2fa-3e2b46a7d92d", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614627, "uuid": "fd33901b-5dc4-4b9d-80bc-5da41929bb6c", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775614627, "uuid": "8c724ab5-ecbb-4a9f-9ed5-b6f95e5170cb", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3f2f8b9-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "6450745d-1fdc-4b47-921c-eff7f65266e0", "comment": "Malware payload (Mirai)", "value": "33c4367a9271660258ba06f4a9a7a8e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "36f3f383-794b-47a7-b41b-aaaa4dc28957", "comment": "Malware payload (Mirai)", "value": "429fc857c0890190191bcb8edfd322e8e0cc46977a5c5f5aab760dbf0ee2668e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "7ae56319-c076-48c1-8e0c-4bbe5a9743c5", "value": "T141334AC5AB93DCF8ED1506713177EB328B77F03A612ADAD7C3899523A842B01E5072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "77c18b5e-4219-4027-8593-c0df816a6630", "value": "1536:3hSgebzgP/AY+39afOsMJRdnhN66OQ6xpwhNbr/p:xZebkP/Ad39UMJRlhN7L6bIbDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620521, "uuid": "d4a8ec0e-6056-45d5-89b4-2e856e86f7af", "value": 50608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "f8a4a1a0-07d8-404f-bf83-35cc2f4a6fa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3f8844a-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "253a8832-ec82-4852-92e9-a9aab297c893", "comment": "Malware payload (Mirai)", "value": "fa27c733599fd3496cea9521148da541", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "7ef27aeb-d1bd-447e-b730-26295deaf7e2", "comment": "Malware payload (Mirai)", "value": "a2f32b1077ec80d80bdd22b3bf5a18a950687e2f24c9949af97a4b7068a3c939", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "461c05dd-23e6-4c6f-9274-71e7adbfa17a", "value": "T15E436B256A7A2E17C0E4B4BE22F74754B2E1665E25E8C61E7D330E4FFF21A50A0436", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "b806e617-481d-4f43-a0e5-bf9ef126ae06", "value": "768:Cuopf8bQPAZqRU+fECeU6tq9bXV85PnXIsf0lkgUI7O+qoSJ/t:CuOoQAqRU6ECeU6tSbXm5PX5If6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620521, "uuid": "4e179ec9-6424-4884-b139-b3aef4cfb8a2", "value": 59664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "67f5df60-a0e6-4f44-a8fc-07ae008e4224", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3fb59e5-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "79fb5563-3163-4ec9-bf1e-e52ef6a57d6c", "comment": "Malware payload (Mirai)", "value": "b3f846ba1d4fcd5a82f5dc525897be18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "16f177cc-c872-42f8-a374-e64890838e1c", "comment": "Malware payload (Mirai)", "value": "c8f2f20c79a68a6f715c74fcde576d845c445812380818733460d357ed11791f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "373c7749-0a1d-420b-94ca-b55bf5cb9d3d", "value": "T139D35B46EB808E03C4D5137ABAAF41493322E754D3DB330699185FB43F86BAF0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "8298f0c1-f92a-43d0-9b94-79343397ca03", "value": "3072:ho9lg+zhz3sJu1NHLL8XmiC/glLCZTVHHlOM/9d0Yj:W9lgahz3sE1lcmiC/g1CLHHcM/9mYj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620521, "uuid": "2676343c-c9d4-4e65-9634-4988ac6052e3", "value": 131898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620521, "uuid": "0a39de38-f56b-42e7-96ef-cc4772d90a3c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c54d2c02-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "aa028c00-95e5-4c95-9d1f-ec23cc8cc4ee", "comment": "Malware payload (Mirai)", "value": "c80ab9a5c59382f9a36aa677df7e2159", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "b4e5197a-4fe7-4f93-a2b5-2780ead30625", "comment": "Malware payload (Mirai)", "value": "ec21a411fbedbc59c981f88d9524d038a55db2778d1b3dc02dc92166b02b8345", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "10730d9e-e9ce-46f4-9c76-7c349a570970", "value": "T1E373A70E6E259FBCFB9C823587B78F21965833D626E1C644D15CEA011EB034E741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "e8c35e43-d5d9-4060-852c-53c4e11e4c72", "value": "1536:zoVvPLWTs7ys6XcniEyNMV3sDmTRdVSabdza3TTLbwXmP5w:zo5WTm6XouMV3sDmTvVSabQ3TTLbwXmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620523, "uuid": "e0b5dc2b-3d41-4d60-b03d-94d2e28195e9", "value": 75976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "ded5f324-1a43-48f0-93fa-cfa1272ddd8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c54d6cd4-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "75f0741d-f9d8-4501-9c84-663c6e28a37a", "comment": "Malware payload (Mirai)", "value": "1fc5ec7ee0f2f52bf109ad47ea10e388", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "f9f20d0a-d6ad-4a23-a0b3-b96d0be8b6c0", "comment": "Malware payload (Mirai)", "value": "fd73471e429a7108e0d55caaec27d4a599f2942a513c785eea303bc6eb2d1952", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "e4a8fdd7-66a6-4709-a8ac-455c5632a052", "value": "T109431A96B801AD7CF94FE6BE94234D0DFA21335051930B2B67A7FDD36D321A86E12D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "d48ffb3d-7d77-4d36-a34b-68f3df55568c", "value": "1536:oFMAMFlwZA9UwTrPE3wqyIE8WhibBqKpnzJ:zTFlwZSUwTYlfqjKpzJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620523, "uuid": "8e0b3de4-d72e-47a5-9de7-cbf98836450d", "value": 57088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "365488d5-3210-496b-8d79-0e40cf7b7d30", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c55ab915-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "e2259fd3-90f2-44e2-a3d7-6ae5df296ff1", "comment": "Malware payload (Mirai)", "value": "3e4598341b7f7fbc02bfcbba03b3c6f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "054d177a-9b54-48c6-b20f-4cbf253a7c5e", "comment": "Malware payload (Mirai)", "value": "3ad327e815be5f02c871028e0a48300158696a64c3d907cc8d1d068078ebc1a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "41b2479e-c7eb-47c5-8d11-1f9c9b404655", "value": "T11A435D43321C0E47D1A25EB0253F17E093BFE95124F4B689265F9B5A8B36E3B1486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "90600628-35ad-4ac0-9770-23403abeb8d7", "value": "768:lgbf8RQzh1r3FgzRaN7+faVt7Ymuiygu1HoGczEpGVuz2GipH6TnSgGABy:ybUg1Jgzz4Cqu1Hisi6nSgG8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620523, "uuid": "3cb26701-f4b2-4ca0-8e54-6004ed001c18", "value": 55472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "23909e51-5505-4843-a2b7-ff749f87ef43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5601402-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "6779135f-47f2-4240-af5b-70dfb374d1e3", "comment": "Malware payload (Mirai)", "value": "e3b5b5cc2d68f099bfbf212a5124089b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "188e7c4e-3426-4ef8-8d93-791d81189bee", "comment": "Malware payload (Mirai)", "value": "a7a7d5f87857fe69f130b48c0ab793c86469b12ad8e905ee2f82a2bfa9e0859f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "9df1767f-5fae-4cc8-8a04-1e0f489fcb37", "value": "T1A043185178D19A16C6E423BBFA6E40CD372563E8E1DF32178D212F1177CA82F0DA7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "22412911-4da7-4b9e-b5a2-a9e12d83a1b9", "value": "1536:saEJMzL7BC+nfbXq/5XqbFJ9WhKvriEALd2:saDD2/kJQhYbALd2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620523, "uuid": "662c6593-3f6a-4940-8d3c-a818ad7cba26", "value": 59988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620523, "uuid": "7d0537d5-63b8-4175-b5d4-a71f601906bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c58c17e6-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620524, "uuid": "4a6cacbe-d30b-4dd6-b2e6-c9b0419438b1", "comment": "Malware payload (Mirai)", "value": "966cf73c0bc8c0785f458ff5d5ed35b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620524, "uuid": "f6de80a3-f28b-457a-a9fd-18ae5e6e8478", "comment": "Malware payload (Mirai)", "value": "f920aa1c33eda029b26fcda772873a48757c6adc575f69197b1972cf8bd0a0eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620524, "uuid": "519c0678-c61f-4edc-a27e-62379850e9f4", "value": "T1F133D79178D15A2AC6E423BAF9AE508E3321B3E8D1DF7217CC241B047AD552F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620524, "uuid": "453e9f4e-21aa-409e-b191-f567e61a799a", "value": "1536:YGZh1mxMBEfiJo25+J+KEwrKdqnKKUWhK9RP:YGZ++tS+KEwwKPh6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620524, "uuid": "2d91a351-77fc-4021-9891-e6dc80353aab", "value": 51172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620524, "uuid": "3c5a85f9-2098-4660-95ec-3a9f5e7381fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec855a10-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620589, "uuid": "4170dee9-e9cb-45ab-b709-483263f1d6bc", "comment": "Malware payload (Mirai)", "value": "6b68397b3494b6c2ba60eac9a52f8518", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620589, "uuid": "64c1efec-3d34-4d72-a4b6-94bda33e3714", "comment": "Malware payload (Mirai)", "value": "b13cda91c5c2dd0216d95d3c6345a243e98314bb63e81c3f1509317e1a2f1a0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620589, "uuid": "c6542d7a-e656-45ed-98c0-e59728566f66", "value": "T18D338E76C42EADD8C6458734B82A4A740FA3E10891E76EFA5B8586A54043FFCF61C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620589, "uuid": "4a01af5b-d33a-4793-a91f-251d59478aea", "value": "768:Er9Q6eGyC75erUUeOiwwtNp40Zdi/FyGoMuJLk3XCmlolN9aXCxj:EcdC753UlwtNEFyGoMD3X3qlGXCxj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620589, "uuid": "39b87198-bb7f-4dc5-8a10-36ebbbad051c", "value": 51924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620589, "uuid": "f1b30523-3e6a-4e2a-88ec-44775e94eace", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed0357d0-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620590, "uuid": "faa71596-a1d4-492e-91b9-9ca652277fc5", "comment": "Malware payload (Mirai)", "value": "f2ddcf792143b4dcaf591ffeb4966212", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620590, "uuid": "e2b7ef3f-ebbd-4161-8002-b658aa6855dc", "comment": "Malware payload (Mirai)", "value": "81afb159d80bc194654a1f7299df96ae65964e8535f5fcd675a9d5736b047fa4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620590, "uuid": "ba6691d7-5792-4d70-8a47-d152a23108b5", "value": "T1DD73B309BFA50FB7EC9BCC374AA92712248D651A35A93F35BD34D418F25B21F15E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620590, "uuid": "566731a4-6906-4ce5-a8cf-7b7b5cb0639c", "value": "1536:aHJtIFGq1QuT+uDEQhKvt191Yi8ZNFDGm:aHJtIM0T+UEQPi8b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620590, "uuid": "f82e3226-11f3-4886-9797-9b096a1a44cf", "value": 76904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620590, "uuid": "41247268-27aa-4adc-800d-d0e430881345", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed2a3482-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775620590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620590, "uuid": "6fef45cb-ec56-4cac-86c6-08a067f6ff8f", "comment": "Malware payload (Mirai)", "value": "366f7ec3301027136bd55ff1087976d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620590, "uuid": "5387713b-85c3-457b-8843-f664e0aad0c1", "comment": "Malware payload (Mirai)", "value": "bbc3247d89c0a9d67f6b33950848112748225ca0159ee6cd295dce79d0ecb625", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620590, "uuid": "7feea870-20fe-4b10-bf16-50c29dd1a73c", "value": "T19C630852B8C18E15C5D813BBFA2E018D33126768E3DFB2129D116F147BCA92F0E77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620590, "uuid": "8a577edb-2a84-4a1d-98af-2c2b2dc5dec1", "value": "1536:StnER4jL83+4/ZZM0mA8w7lR5vzq91dO0nz/IziSX+1/K:t4jo+6ZZBLbRd29P2X+1/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775620590, "uuid": "eadf15a9-c79c-42b4-aea1-27adcf7b760e", "value": 70960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620590, "uuid": "99f018c9-0307-4948-8da7-96e2a15523dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3da4880c-3300-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775621155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621155, "uuid": "58e588a2-94b8-48ef-b9b1-391094677175", "comment": "Malware payload", "value": "7e9bd95f6daea7ca859e50723bf8ae2c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621155, "uuid": "1d7b157a-1129-4ddb-aa2c-2af1ff3dd4a9", "comment": "Malware payload", "value": "e11348541595d0fcdc9a30491c6ce0de529213e6bda5c55681f0ea0e67d038da", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621155, "uuid": "95f8c44d-ddd0-40fd-95fc-5a0e341f6d04", "value": "T1E88309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621155, "uuid": "45c11cce-7c1b-4c26-9755-47d21269648c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnI3WaXVN/:XEKltp9txAX/yr2pbI3W+VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775621155, "uuid": "59a06fb8-969c-4b4a-bc24-61c65dd8b412", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621155, "uuid": "c00d1d2c-3246-42c5-8574-1d9ebf7ba024", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2063c32-3300-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775621350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621350, "uuid": "361a8357-b40a-4db2-a792-f69bc6ad90e5", "comment": "Malware payload (ConnectWise)", "value": "2f9029c622d02d245c6dad18ccbb2575", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621350, "uuid": "c57fbc27-a4c1-4919-9a60-cf89c8267fa1", "comment": "Malware payload (ConnectWise)", "value": "3eac30376dcb1cf2fe3a632e5f853329a5f7842d33f166bbbe34ef2479829f75", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621350, "uuid": "9a25a9f6-fb69-48a7-ad6c-9158d77fe7ed", "value": "T1DEE6230573F8A109F1B32A3AED3955F19C7B7C228D62D15E1658364E1AB0EC19AB37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621350, "uuid": "0adb3e01-f810-4d03-a330-096022e007d7", "value": "393216:WmkEdQ03NldlmkEd8mkEd9mkEdBmkEdnmkEdjmkEd:KE2cxXEqEZEVEDEfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775621350, "uuid": "7185934c-1517-49e6-870d-fd87fc774e96", "value": 15216640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621350, "uuid": "2c3eb7d0-e6af-4f18-abf7-a24253bce1af", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90da850d-3302-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775622153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622153, "uuid": "a775c116-3031-4ff4-9da8-a66e11dfc2b7", "comment": "Malware payload", "value": "d2b6230b7b7b50fc5835ab1feb42a2e8", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622153, "uuid": "a94b9590-4a1a-475f-842b-83cc2406e4cf", "comment": "Malware payload", "value": "e9c3efd76af8a87cf38ff2e5fa490cade78c9c3d671b7abfd08a5fd5e7c46fdd", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622153, "uuid": "beb0ea7d-677a-43d7-84a5-e8793da57c7c", "value": "T1C9B633C4A2D259B2E4BB81B985D0FB2F012CEA24237AE4C7BDB11E2F95252D1C7353", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622153, "uuid": "d8a3d0f9-cd15-485c-8417-f0a6b1a78c90", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622153, "uuid": "3b164095-d1c9-4b13-8a4c-e6288d584e47", "value": "196608:MUP1eHn0sXkkPk/oqlspfNQSjiSRAnj3WvekLigZG5ln+ZruAph9lPjH:zP1eUf/o8sISjipjGv35ZG5Q8AphTH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775622153, "uuid": "c6daeb6f-4cac-40ff-a3a3-6ba3b3bb006e", "value": 11415040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622153, "uuid": "151ad722-d668-44cf-b1b1-4657f0b4c254", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "698ef2fb-3306-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775623805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623805, "uuid": "5e1513bc-ead8-4170-922e-3c768e7197de", "comment": "Malware payload", "value": "c6b913a4fd8fe1b2af78404f393426c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623805, "uuid": "f2da2932-8c59-4354-be07-828c8ce439db", "comment": "Malware payload", "value": "1669763fbd6562277c9d668735852f1f70accd6b2ca66d9cf580b30b7acea076", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623805, "uuid": "1879b41e-0d6a-4d93-91c5-8eab2535765e", "value": "T14C931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623805, "uuid": "a3f5a8f2-9d5c-46a9-ab81-9193e6e2b7f6", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCK21sPyK+t8:08jIL0GitkbFv2v05xsprQ1sPy1t3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775623805, "uuid": "f3bb710d-6d88-4b21-9389-c838b04b3e42", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623805, "uuid": "770a7f5c-decf-48ff-8ab1-ce7f55c3b6bc", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0abbaa49-3308-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775624505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624505, "uuid": "52759353-b00d-49c9-b07e-fb475192958c", "comment": "Malware payload", "value": "087c520e06533b186c3bf0a41c74686f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624505, "uuid": "e768d6b8-364e-4e50-8662-1e8b09856c98", "comment": "Malware payload", "value": "e74c8b374ca807a69aa72c8432defdc79208360bb5a693cd8d069ff729cdda52", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624505, "uuid": "2eb8b4c0-5bd1-4b0f-8bd5-03f0b87b5637", "value": "T16C93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624505, "uuid": "5bdabcaf-d25e-40b5-ad50-3c72244234a4", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX5IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775624505, "uuid": "5ed152a7-cdbc-4864-9ad3-3cf24d5fe75c", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624505, "uuid": "5022138f-d2aa-4239-9309-fb7013679f71", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "586d374e-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1775630649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630649, "uuid": "519699cd-a89c-41bf-bcd7-0d0177be3ce2", "comment": "Malware payload (SalatStealer)", "value": "b386cccc086b9f7476e556a8c619f33c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630649, "uuid": "75c963b1-aa89-4816-8193-88ed81514d04", "comment": "Malware payload (SalatStealer)", "value": "cc46de968f628c28a3dbb33194cd7ad2b09cb63b1718a24738d2306da7060deb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630649, "uuid": "d66ecc09-7c8d-477e-b5e6-015711dc629d", "value": "T1C4E5330B0B609E4ACBCE36354E218EE3D4E839315EAD0BB6F5D037848E175F86D960", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630649, "uuid": "1b55064b-047e-408d-89e7-1b4cce95c9fe", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630649, "uuid": "05c38ecc-b7a3-40ed-935c-570958d64ade", "value": "49152:ShMy7WSTzKuOxln4/6x18H5L1+/GBUttJbX9xZJvOnIDzI3nNdA1Ttuu:EpDuxlnI6xIz+OBUttJzLZnzI341TX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775630649, "uuid": "61a31cd2-6e30-483a-a7ae-f6e14d26f94d", "value": 3297280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630649, "uuid": "254dae22-6e2d-4a41-8d1b-1aab2022f734", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8facc6b8-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637613, "uuid": "ab48696c-fe04-474c-85c1-7e18085112aa", "comment": "Malware payload (Mirai)", "value": "787ddaad058ff2cbe39703f6b35cc1df", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637613, "uuid": "c3191a7c-6a41-4bdb-b289-4aae7b25788e", "comment": "Malware payload (Mirai)", "value": "a592f3c098817827d060960a67c6dc349a939a34318e31f75d4baa8fc1418f06", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637613, "uuid": "154e33fb-b6ea-4671-9ec4-a3e49273c3da", "value": "T1C1E30B46F8814B12D5D111BAFE1E128E37131BB8E2DE73029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637613, "uuid": "76c1f6f3-fae1-4cf2-9810-207dc6f2b16b", "value": "3072:DHea4CHoUjnwJIXMb6Azz1az/AWdYV8P4KLi:zePCHoQ6IXufzhakr8P4KLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637613, "uuid": "7e87d407-768b-419c-8089-f4cb060a955d", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637613, "uuid": "147ba3a1-6eee-4155-8f03-019f5d00c687", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b576cdec-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "49e6929e-8643-4087-ac34-02f74a32c541", "comment": "Malware payload (Mirai)", "value": "4289f6017758b994bde5617e5ccc7590", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "4cae3b8c-cd31-4380-88eb-8e5ac282a2e1", "comment": "Malware payload (Mirai)", "value": "591e2044917f15a2459bb96a819e4acc227f78480309007c8bd4c24e74ff1b0c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "8622baef-48a5-481e-b62f-d26c0486cd29", "value": "T119042945EA404B13C0D627B9F6DF42453333AB9497EB73069528ABB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "0a87918f-de75-43a5-90be-a1039e1f93cd", "value": "3072:OLe6vhN1QIruCee+asuTuRebU7IVILzZQy38YhTfYo+M/Rvs1tlLn:ee6vhQIr1r+asuTuReAvLz738+x+M/RO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637677, "uuid": "0ddf5f7b-b27e-465c-91c8-251e7203b629", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "7810a9bb-c145-4781-a4d5-230392be384b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5797c40-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "d34290e1-6022-4dbe-b75f-291747a240c7", "comment": "Malware payload (Mirai)", "value": "8b97145fd3fad56f771c272a0eba8e2f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "aba3cd6b-9eb9-45e1-8288-d748d6a28431", "comment": "Malware payload (Mirai)", "value": "6e6425f7d5c70152faad0f80f7fc6e8e6fd90843756de738074924551cbf0e7e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "bae4cebe-567c-4a94-afe9-37bf12d9b9bb", "value": "T12D04B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "79e8983e-1978-4e3f-ab38-acfd8f121c73", "value": "3072:nKpzGjeNkSfcQqmav8SqaRVlnYz65eVt:nKYjeNYQqmeqavlg65e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637677, "uuid": "30bb069d-aeac-4626-8651-1a07c273f036", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "92efb3ab-656d-4b5d-b488-7399d36f5358", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57a1e67-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "0c711596-c30e-4d64-8f35-94d69b425711", "comment": "Malware payload (Mirai)", "value": "860b88563a41bb87476faaddabf38240", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "23c439d9-6a5a-4113-8081-4ec35b0e4d79", "comment": "Malware payload (Mirai)", "value": "a85f23d430683af6384f4149dda248eb936a8e3b8253427244768bacab185a36", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "f7c6156e-5fc0-40f6-b75f-cb35005f1638", "value": "T147D30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "936b7a3d-d65c-4eb9-868e-729d2664b3b2", "value": "1536:wKdzElm18uZJNb4A4Fa8eAZHk4VB7fzTTfHh+gYSvvqeqZfB20ly+wyw6RNP8TGf:wKp50XU8e947LPHh+zS6thBZ6xKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637677, "uuid": "7a9675d0-5aed-48fb-a6b5-81bf8d246f37", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "712c1f48-f88d-4ac2-a065-4cead639920e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57aece6-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "0e7e4d47-9b71-4db4-97aa-95f6d218e991", "comment": "Malware payload (Mirai)", "value": "8bfe6fc717aac6ea69801f5812377292", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "630eb61f-a73b-4116-8b31-e66bea82f98c", "comment": "Malware payload (Mirai)", "value": "592ebee14e0ba4cdaf3ea3c4306ce1bc531216dbd079ab815e666b7bcb985e28", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "e58442be-c8f7-46e1-8e16-62bc58d11ed1", "value": "T180C31B45FC505B23C6C612BBFB5E428D3B2A17E8D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "42662a6f-a4b5-4807-ba2c-07de88704fd9", "value": "1536:p3Ka0rG5yC/cMChygtXOBdWFAcJX4VlgXTAjcFAaUGxrf851WhXVVlnKwywEReQJ:5KaprMh7ROXWFh4UXwcFAa5xovW5kKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637677, "uuid": "546967a2-af9f-444b-b2a4-c6a7dfa0aa68", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "bdd94a93-6d78-406f-9e29-47c04e09ad54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b582ab91-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "c18f4fc6-4739-4417-b65e-5f069205c912", "comment": "Malware payload (Mirai)", "value": "9cc035496d930afbdd4b04152e9f1c33", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "7c87020a-6fff-45c0-992e-f89c57280579", "comment": "Malware payload (Mirai)", "value": "82000aac56754f4b3989d970a0ad43bf73d34d626e9f49da4226a378d3456755", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "0f4d929d-827c-4c58-ad15-1b2be1a8ac8f", "value": "T11ED32A06730C0A47D2632EB43A3F67E193AF9AC121E4F640355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "a8f4f7da-fc06-486c-9547-991d13cfc4c6", "value": "1536:9roGHNTUZN0MIBUiCxfytiteQInJ7abwko7lj0JvAhhHr5+5uQfqIcv788:nmmUiCx5t26wN7lDhLvI8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637677, "uuid": "f30645c8-146b-4081-b6e2-a6ce05184182", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "72e1b656-9f7e-4fd1-9fb2-0632113e85ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b58b63b7-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "6c622eff-b917-45a3-b1d5-cc23559ff64e", "comment": "Malware payload (Mirai)", "value": "f380c3dc962ef56514c18d20c38c5513", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "6d5c4213-0487-4eb1-bc35-2d1c062a346a", "comment": "Malware payload (Mirai)", "value": "8d098c57a6aa58a9eca8e34ce7c2c6ad68ef3316f9046c367d71162987eff551", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "1c0cefad-cf4e-434e-bb8a-9051b781396d", "value": "T1A6E329C7F800DEFAF80AE33748570905B630BBE115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "e8bcc25b-a908-4a6e-be05-ed8ad5155345", "value": "3072:KmzTDH86Jn78rCdV5jAti2id2ow9+aVvjbitLLxGyMYE9j:K2TDH86J5fjAtiHde9+3L4yMP9j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637677, "uuid": "6f30c33c-82d0-4934-aa7f-43fe9d2b9225", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637677, "uuid": "0fcfae30-0756-4648-9fdd-aaed40081b4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6ccfdea-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637733, "uuid": "67fa6417-f1e0-45ff-ad5e-77bfd4426f0d", "comment": "Malware payload (Mirai)", "value": "b2003fad93976db7b987268068f107c3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637733, "uuid": "55f424a7-7f2f-45a9-a7fa-d2e7572161bb", "comment": "Malware payload (Mirai)", "value": "afe91b9f33203b2d30e57d8d85fa72ad2ca5ac814e32b0ed8aabd68a975f5581", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637733, "uuid": "9bfd7347-7eda-4c22-8ca0-df2ceb221a92", "value": "T1ADB35BB3DC26AF98C655D074B0B08FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637733, "uuid": "cc814ffa-a01b-4a86-828f-592fee2ef33e", "value": "1536:WTW/VCxsHZusS2Li62C8vqKTR5/PPVGAto2WszrW+TNe7F:WytCxsSx62NFT7VG92WcrbwR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637733, "uuid": "656665c6-6905-4482-8e59-6ee76ec8706c", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637733, "uuid": "8fbcf46d-f164-4071-9b79-10524ad39bc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6cd22de-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637733, "uuid": "9ca21101-1e09-44be-b5e0-1616ec08c9d3", "comment": "Malware payload (Mirai)", "value": "335e124ba09966ac938e04a763371bfe", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637733, "uuid": "a69f4209-f458-4ae4-b4f7-faae1a6bdcfa", "comment": "Malware payload (Mirai)", "value": "01674c371cf15f92d7a08e1597512e11c28e3d1d803d5386b75ce3e9018ae2c7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637733, "uuid": "3583c7a1-bb64-48cc-bcd1-dd04c84f32fb", "value": "T19104881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637733, "uuid": "2c6acd58-b0d4-4451-8308-39b42e7a8d7f", "value": "3072:jg57RM7LHZwbq1YSBan1yvbysxr1uGSII:jglRM7LHZ0Bqyy1BSII", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637733, "uuid": "0aac3282-33c6-424b-a9a9-fdcb84d02003", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637733, "uuid": "35ef12d9-406c-48cd-807b-da068da4afed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7837870-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637787, "uuid": "9d1242a6-de5c-4eb0-a6b6-a5795c9e15d4", "comment": "Malware payload (Mirai)", "value": "934afda0005dc6f510a020fb3632e972", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637787, "uuid": "b19d1847-cf9b-4926-a6b5-5631079f6ccf", "comment": "Malware payload (Mirai)", "value": "1e046c1095d82fb2f9ce180f1dea20db93cb1bfe6d03af49622e452179e900ac", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637787, "uuid": "1a2b9c99-e1b3-44e3-9a27-8f439d548efe", "value": "T1DE5301FA70E83ECCC1954670060B05463DD66738A15E663B72C8F6A84BB1740DFD8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637787, "uuid": "17f283b9-db47-4faf-99ad-b13aa5746df1", "value": "1536:e1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8AS9Lkg4azHJ:eM5az1Fy0oPgdZX6hTo8R9LGazHJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637787, "uuid": "6ef1ac9e-7f9f-450f-b473-a8ff9c48310f", "value": 60816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637787, "uuid": "6de776eb-7d70-43f4-9ad2-db6a67e6b630", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa538645-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "cc1e2e88-d0c0-4324-ab53-8f0194a1fbf9", "comment": "Malware payload (Mirai)", "value": "a2801839c55283b0e87aa3ffa8a02369", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "f2ca09a3-c605-47bb-a2c0-68bb25a72c45", "comment": "Malware payload (Mirai)", "value": "f19c0ee393a58fda080f361e659673e9f0334534ede70d7acf4dc9bb3932f3c5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "8e951e47-0ba5-4ebf-a2d3-63d849d47620", "value": "T1866302CF6EB02F16D0D8A2B5303825E5D839EDCAE243CA98C3E1A79B4735176518C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "72aade25-5fd6-42cf-a27d-d814d26befc3", "value": "1536:saxZLmYKVDNSl2y08yumeJyGYVmIMzWTN0:saxZLmYKX+t08jmeJhYdN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637792, "uuid": "9f57a7d4-a9a6-4785-862f-9467047e4eaf", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "c23ba59e-997d-4ec1-98ea-27f8383b83b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa5758fa-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "03f2f731-6e4a-4189-bb99-8d0dda4e594e", "comment": "Malware payload (Mirai)", "value": "20e9174ff9f683730635bf6d90a6282e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "d4e6dcb4-fb06-487d-9f4f-450c5fbce39e", "comment": "Malware payload (Mirai)", "value": "599b08342814503817176d7a763d446cdbed1b7ef0981071897ca8346307d58a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "60f851cb-086b-4edf-9bcb-00e5baf86196", "value": "T1D2B3AF87B2507ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "563043ba-97b8-42b8-a37b-22cf671d8435", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fH9Y8rSR:t3SrlGWnKTU83AQB5A5Liy36f2USR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637792, "uuid": "647ff00b-02f5-45f4-af93-e6e871658f6f", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "f29c4a53-6e85-40e0-8c3d-e0529a5a55b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa5bb50f-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "eff9237b-63e4-4f10-b6b2-ec7d65a49605", "comment": "Malware payload (Mirai)", "value": "30168ea2e2a547c183b239e2c668687b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "26acca8f-eb31-4732-bfb4-5f8daaadb594", "comment": "Malware payload (Mirai)", "value": "c579757d3487fd0c66c9001bfe4d7275fc9589ae86418f359eb2dbb3577cd387", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "662d0ad0-5306-41f5-9e4a-7dbca5a9e724", "value": "T15073127221A6EEB2C5F2403263437D8A7D23C8BA037456BDBD79976FB042E119C0D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "c95bc4c3-b5cd-4011-b654-982cd2f18353", "value": "1536:H8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmHlo6ord:czRnwP0bMQ2RijvDZZ1rYGhG13zSd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637792, "uuid": "862e5d69-259a-4670-b823-cbc0e9c9411e", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637792, "uuid": "7674bebd-218d-46ea-a037-78a599b7cf45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdb1388b-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "b21fcfd9-6529-4595-9072-bed9ed59132f", "comment": "Malware payload (Mirai)", "value": "669d11ade50b57d935ca637e028d41f7", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "524142e2-b4b1-4e6f-8c1d-c0f71d4e4213", "comment": "Malware payload (Mirai)", "value": "a72cc34b1661970b7609bf4478c773ff42a98a74e92ef92d6875e5d725a3a6ad", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "a9a426d6-a446-4131-9e69-1552a960cd63", "value": "T109937CC0F683C4F6E84305B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "1396bb30-88da-4fb8-a0fd-a3d1780674f4", "value": "1536:W/QCZaxGdvts3i5JPhoeIxPu++ALtgUIKqI4FrS4LSd:WYCZa8dvm3oJPhTIxP5htSKfUmDd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "28576420-7acd-440e-bf0b-3f0f5b6df6c3", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "0451300f-a363-4a67-b0d6-9120ae357652", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdb6ff9d-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "cfe9bbe4-1791-42a7-be57-fbb4682796fd", "comment": "Malware payload (Mirai)", "value": "61a4f3af555b6e8d057001bb65a7a878", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "36f059d6-7bb9-4ad4-a04d-cf2b717f9874", "comment": "Malware payload (Mirai)", "value": "9922ffcc191ce5aa9253ee12787ff1cdacfd734c2f7466c2f7ed6ee519c9e3fc", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "d1df82ca-75bb-4983-9017-d7a8042b63ab", "value": "T1B0631246FFCC5F9CACD927F807B975DA2391E03584B741F81AE6498881AFAB011D98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "c254a3ea-0a02-4b67-a410-93c0285883c1", "value": "1536:A7MbwKNGjjH+Xq34n/q8Zu41zmX3sD6WqMATrPH:A7Mbp2L+Xqdfoz2s1wrPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "200cee10-0543-45bb-a366-ec434d105d9b", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "de7d0f33-7e33-433b-ae6c-3b94c23ac46f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdb80c49-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "339e9a7a-8017-4978-95b5-7640070a6a91", "comment": "Malware payload (Mirai)", "value": "5cc324546fb78c77fdd42355ead60cf5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "5fe6e4c2-20a7-4a61-bcbb-4d605257d1e3", "comment": "Malware payload (Mirai)", "value": "6eb18475a5b64071d648850e295e157426fb1eac0d80ae6e50e82bc64ca391e9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "ed2a2beb-dabd-47e4-8b10-466c68d583f2", "value": "T1B5B3E085B210AE45C02672FC71870A9093B27E7B4B5A150B44B3F5B46DBCDD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "c59314e6-d496-49be-8c87-37adbc65d578", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wu+:as5zqhr5Nzy7wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "4929c0d3-902f-4749-9afb-6a77111782b1", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "ce3265f2-5d47-4f35-9fed-08ec713156b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdbc6fd8-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "dd7af1ea-cfaa-41bf-9795-b685bd4eff70", "comment": "Malware payload (Mirai)", "value": "bafe3761bc6a676ef7d5d975ebc62de9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "7fca7ea7-6eee-45ef-bbe6-9709596520d0", "comment": "Malware payload (Mirai)", "value": "60c9013efe25e9f875fcd6def194ed9b70e47598555e2f5634dca220d15fa0b4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "35683c9d-9cc1-4bdf-acef-aa2eb2496c6e", "value": "T198D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "33e0ffac-f8fd-4629-a66c-695346010f7d", "value": "3072:79eSuygEPjt6qkWqVdKmDnYMb0gBd/gQyVGsdqml6Waj:79eSuygEPjt6qkWqGeH2laWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "433b4c82-984a-4011-9b68-abbbd42a6e04", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "0e8f0e6c-0715-4f49-8ae1-191aaf2ccff4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdbcd4a4-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "00f7a125-a9f7-4660-9cff-477ae86aeb5f", "comment": "Malware payload (Mirai)", "value": "60275b9180b50833662c893efc8da65f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "895275c4-aeec-4363-9852-56ac1bc940a4", "comment": "Malware payload (Mirai)", "value": "1c4307d429ee6c11acf7ed5736591a8c7eee8991668f8e7a78f0f199a2a0202d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "03de2a9f-b490-4d9e-8507-817e2e4f90cc", "value": "T178146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "02048d1b-3788-417d-a45b-63c41f9a64cc", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtE:BZAyFzQSdS7Ix", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "f6526770-33c8-4b8e-ab04-1cbec1d20812", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "fb7c5c02-7bbe-4c86-afc1-d78e594f3958", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdde6f17-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "cd33cd79-2eab-459a-a250-49fc7fd3c98e", "comment": "Malware payload (Mirai)", "value": "4736f2f8adefd1291cc89be32ffb0423", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "13c97254-3d9c-446e-a8b5-c69cc9fd3b08", "comment": "Malware payload (Mirai)", "value": "039421bcb90d621ad5d3d80d7c904fe1a8cf7cdd72c0c745283a322d12acd33a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "bc0fd144-4692-40b7-bdba-e26dcc11c70e", "value": "T10551949B0180DB72D65EC94EB7F0B134620AB08356DF9E18ED80185C8EC6E5C7385F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "fd1fe169-52eb-4ca0-b88c-195983528b50", "value": "48:qudMOM2JMIFyFbiB8BnBuZUwUwcvyyUFonobwLf9h9WNoR3O3hM3IKE:cp2JMY6biB4BuZkobwE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "655d8bff-bbf5-4371-a33d-ba9be8c99ef6", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "069134aa-6e32-420c-9172-0189933818fd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fddea867-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "cf7b4ba5-4019-4ee5-8897-e92eeafdf3ea", "comment": "Malware payload (Mirai)", "value": "e345fb109968e09120d63fea4370f166", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "a7522bd9-f7d0-4d33-a034-e7e0b0bedc56", "comment": "Malware payload (Mirai)", "value": "980eb1f6edb56757e2f39d4b4468e053cd25e5ab53be8e7ac45f0a42b046f7bb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "749e4035-fd69-4d33-9691-5f70da6fa59b", "value": "T1515302416A7CE93ECED3C5390F6841B686C999A49453901F43CD7DF48A06C68FAEC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "f38e1e72-cd5b-478b-adf4-5a5c2120d969", "value": "1536:0dcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/kORevRAQ+:0aHJgMo8FwOA4zUFGUO3UhSORJQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637798, "uuid": "0d3982a4-2f0c-4f24-b2d1-d56fc6d131e7", "value": 63936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637798, "uuid": "5d1fa40d-6824-4899-8689-c28e4e694b51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe457004-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637799, "uuid": "8cb4eee2-2886-4131-831b-eca70ffdd156", "comment": "Malware payload (Mirai)", "value": "9bdded28efc46bdf0a148883818330f2", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637799, "uuid": "6ff2cfdf-275d-4a59-95f3-2cbc20ee5510", "comment": "Malware payload (Mirai)", "value": "e70c66f0b2ad4d32f8b777c312349227df89888c25057068a9a2909de095f66d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637799, "uuid": "d3bb0d79-c2e6-4afb-931e-318a9117c487", "value": "T1D2D3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637799, "uuid": "b3a7a61d-0941-4ff5-ac91-a9709691995b", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Z76:xOFgpOEoVv3MXL5NhGO76", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637799, "uuid": "3452c980-2221-4401-8e73-88488515dc6f", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637799, "uuid": "e6b6e7b0-b78c-42af-b3a7-168140f76dba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fa9206c-3327-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "6cd31c7a-db4b-45f3-ad29-507ba81d79ba", "comment": "Malware payload (Mirai)", "value": "1a6a8c8f40893c8f6f0fdcf0492b426f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "337b3a00-4c55-4f63-882d-a1570c7e1dce", "comment": "Malware payload (Mirai)", "value": "2c7c3d236032a5653a040d82d701811348469aade5472cfd85f45b3e9574d01f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "acb3679e-4b22-4cfb-b28c-6177e1fbdb48", "value": "T15004392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "dd47f405-b4fb-4a7b-a8e7-a0f2c11dce91", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wIUXS:7eJpJUVD1A8n0YNgEJi5a5i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637855, "uuid": "71c34637-70ec-4e54-996b-9a173ad92159", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "0313e5cd-cd03-4db6-930a-12a297e8e8e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fb3d254-3327-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "70807f3c-b60b-4a05-b224-efe72d4d259f", "comment": "Malware payload (Mirai)", "value": "f6b69405f3e197cd6c19f058b1d2a853", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "aa522f37-5187-4484-b2d7-585c0b8ab638", "comment": "Malware payload (Mirai)", "value": "45beeec48e8209f5fdaf899d5dfed99d66f485afae987297242aa73885d6449f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "86e87f73-3ed5-4ad3-8f70-40dd8f1560f8", "value": "T112C3F185BB636991C06342BDA4C01AC387916E328FE217080699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "0d35b8de-549b-4a93-8fc9-1e081e230961", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnZ:0OCDjXG9qTWywxlxTnZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637855, "uuid": "c9f0d835-09f1-4937-876b-dde5fe7b16e2", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "b41226a4-f4eb-4b67-b8fb-0baf9b240c21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fb419ff-3327-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "d3d4ea2b-064c-4e13-b340-b16ced6dcacd", "comment": "Malware payload (Mirai)", "value": "db7bffd119d821d8872f9baed78d1bb6", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "a419d647-3ee1-40c0-8230-043154a69998", "comment": "Malware payload (Mirai)", "value": "dacc4cc34d6426e7017bc17158f7aad9cee56345bdb36fd7a86ad477e8ccb1eb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "67029eee-503d-4b8d-adb6-d33ebf241c99", "value": "T18AD3BF21E4006DD1EC2129B578BA96B80350EE700BDE1582EFFDF95E747BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "aed6e298-b13b-42f5-8e78-dbe462dbef50", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xn:PiySSGp+PMmT7zMplp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637855, "uuid": "d741e50d-6e63-44bf-8d29-917637a744d7", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "396cc18d-4b70-4964-a9c9-ec598c58efa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fc1cc58-3327-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "952f6df2-a57f-4c3a-bcec-25cb282a34b4", "comment": "Malware payload (Mirai)", "value": "75de88b5e113bb9c57c89a7d654cc430", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "00954c1b-0b95-42e8-8040-a20b3a88450a", "comment": "Malware payload (Mirai)", "value": "9133da50c4671f22fe5daa372632885d59a7d33ec2638d6b818b40533503634d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "1d4c1030-ffb8-4870-82b8-c8e6212ac419", "value": "T195148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "049cb59d-46fe-452a-a748-20730a518c6f", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRIUKG:IcY5JpMByVs9jSXf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637855, "uuid": "147d3f46-2e15-432e-9d11-f6cda921dfcd", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637855, "uuid": "dba200cb-6743-46f4-a4cd-147633deb0d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691f0fb4-3327-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775637978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637978, "uuid": "1d6f8c2f-5c1c-45d9-a1af-9454dbbd6786", "comment": "Malware payload (Mirai)", "value": "69418b13314fb26876a609cd9d54c695", "object_relation": "md5", "Tag": [ { "name": "176-65-139-67", "colour": "#7823ad", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637978, "uuid": "3f280e2c-7017-4ed1-9533-8bc87ce9d96e", "comment": "Malware payload (Mirai)", "value": "fc5c57ae0c66ea7582e8fea937f533ceaea1c83ff51a75e4f62d4ef6e1930447", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-67", "colour": "#7823ad", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637978, "uuid": "6e23385e-f649-4801-aa78-aab4dfe46ac5", "value": "T11F63410ABF611EF7F86FCD3706E52B49308C641A21A83F757974E918FA4A10B54E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637978, "uuid": "7718b2da-f2e0-4622-bf45-f81b5bc162ee", "value": "1536:nxo6M86eAtqV7lf2VNufYuI0Kck6n2MFiwbZn:K6MjeAt8792hulKV6nkwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775637978, "uuid": "304d146e-ef0a-4925-9d99-312141a69daa", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637978, "uuid": "a68a1700-7a90-4a28-904c-7014efa93048", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac02e33-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "ca452e51-bbe4-4765-9d8e-eac8c2e487c6", "comment": "Malware payload (Mirai)", "value": "4c7422f6f8ecbf2810157a5e36fcf0b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "3f9adf72-f1cc-441e-82b2-e8f8e2f7ff09", "comment": "Malware payload (Mirai)", "value": "3b89869aadf312ff766e9f8c87899dbb5de3319268ce351267f03b44e5630e06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "24c72412-0a84-4358-93f9-a3aa246e2b42", "value": "T1B003F1219B17DB91D63648B6733C88D7F2160FE490AE26BE3509C42E3679E239BF50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "e0c71f53-f7ec-489c-92c1-db05f99287e4", "value": "768:kskNb+0HIHluEi0ToLhuZrnsM35nW7W33tnSFacKADcfEMZeMO1/Zg+pyOCz9q3f:kskNybFuEhTqersMNWYBRpfE6YY3OCyZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "c00d302d-5c5e-434b-9630-edf594ea90c3", "value": 41240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "4a5abd3a-6a04-45c9-ac98-2e48c18010c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac67006-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "555d3054-c8ee-4217-a4ab-e5492d43c0c5", "comment": "Malware payload (Mirai)", "value": "bfd756545a20b14a51437724ae6204d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "845d6eda-0bdf-433c-8906-79ffaa30ebcb", "comment": "Malware payload (Mirai)", "value": "4bfc76bca7eeb6a4b94883f11885bf35af2ccb767481d5ccdc0c06b0930c9b4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "1bc55f43-b935-429a-872b-f06b9f343584", "value": "T1C503F1421AB85D31D33C1C3AE6FE46C315AF562F83F6517714A0899CB2C2E6C0B787", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "5f07d850-127b-4d38-8252-768357f0a6fe", "value": "768:CG2AL8fXpGbEAIOFbTpyAMJRlk+gYoXa0pIGuhe9SsMs3Uozd:CG2iGIEAx3pyAMJRdYKWkEJzd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "2cea224c-b7a4-4451-8a56-411fbfb6faee", "value": 37912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "5fdf8c51-edee-4166-90af-7a4f166a1bea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac6d6ea-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "7f30f55c-c31c-471f-8090-bb8a713a0aa1", "comment": "Malware payload (Mirai)", "value": "dbb92760754f31fe00ee9fb78e0af747", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "afb6ff5a-b0dc-4a1c-bb74-a8d2f6c6d59f", "comment": "Malware payload (Mirai)", "value": "2e8824972143ef3f829ec410d6b1c60f5b88a48fbbbfa7758850987a1651630b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "b7119583-212b-4aa3-845c-ad21f83b1e37", "value": "T191A2D09669042870CB702879D87C4159A9C587F8F1D9733AB0412BBDE390BCFE5759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "5ce4707d-8161-44f0-94aa-84f6ba27d7bf", "value": "384:X7pe/EZ6L01sSWjDDR/2gmjI8RiEb9Hx5uA3r3by0AAPdhymdGUop5hthjd:U/EsL0iSaDPI1tx5uA3rKcds3UozXhB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "c06aad20-40f6-49d4-ad4d-ba201ca1db13", "value": 21656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "01258994-256b-4646-a8d4-d84d3052d57d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac730b5-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "f5184d39-ef64-4d0f-b03e-352acfaca2c8", "comment": "Malware payload (Mirai)", "value": "614bd7317ec2a201fb1a41179ada7c52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "c7708b28-b788-4430-a4b1-2150c368339a", "comment": "Malware payload (Mirai)", "value": "f3fa09535f3e98300c1037eee9b3efb97a655bf7a172f974e9c3923e7527703d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "15d9f44f-c4e7-42f0-8721-21b66c790990", "value": "T10103E1E3827F0934E47E59F5150F1654F5A3249768034F3E56ED229F8A9FE407E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "f9019ea1-7b10-4b7c-91bd-244ca61aae7d", "value": "768:abDhk8dq1h+GFvkjsmCn688/70YSSQk4ZpJx072PI:ab28dgpFFvxYYnO2w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "aad0c477-be5b-4959-ab3a-12a495d65dae", "value": 37820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "12dd768e-7c6b-4926-8be5-13e304a6843b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac73eb2-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "58c04438-ceed-42b9-a7d8-1cd204cb2873", "comment": "Malware payload (Mirai)", "value": "d94c094b684de3b45575c6456b110bf9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "500e3e72-d1fc-49b6-b4ff-3c75a3539cd9", "comment": "Malware payload (Mirai)", "value": "ac4bbd489ab2fde846694040f50805444173ef6d45c7f4a68344af53c5930d81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "33650354-7b84-417f-a8e1-adfdfa2c3f2b", "value": "T1E9836D21F979192BC0D4903622F74B27B2F257CA21A8871F7D710E9DBF615803A47E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "48cd2f5a-53c1-4029-9095-28ea6050c575", "value": "1536:RGW+GghrOvrpocFjJbmM8TX28ptQKYm5wP8aGhOtgRJi:IGfETFpuKYOyNWRJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "c7d5f6e7-bce0-47c4-9bcb-6bd757ed63f3", "value": 83272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "057903ab-0393-4eec-9983-567c7c9b2198", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac7c650-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "cf9bf57b-2ade-4e15-af84-01cc94b47022", "comment": "Malware payload (Mirai)", "value": "d0ca3281f99f71acf09cf5de91ee1074", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "4945314a-0a44-4de5-8215-f672e67dbab1", "comment": "Malware payload (Mirai)", "value": "0b64556de49ca4bcb1b78763f09721cd541ff4e49a26d83cc37843ede0f00383", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "7c7fcb2b-1634-48d7-b34b-87280b7bd80c", "value": "T10EB3BEABF20725A2C85243F017C79F8E7E2322919F47A5EB7C1E267A15391DB1D06F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "9112d1fd-d82d-4237-bfb0-49d9d99d4304", "value": "1536:BavMa19DTAY0sG6kWzSCa2lGTONa2e5m/lpvxJ63sgqY/LWj:qF19fCvNWeCNEEa2eulpKsgqYq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "c64d829f-d9a6-46c9-b4d7-8b16d860a692", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "b357bc81-6066-47c0-a169-9429f7077676", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1acc939f-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "bdc818a0-9392-4c9d-af83-85f4c5e56b38", "comment": "Malware payload (Mirai)", "value": "32caa02a44b91f8c23366131504e2072", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "ebab60b0-e086-4188-8d74-fb44c94e2e38", "comment": "Malware payload (Mirai)", "value": "5d5f38e21019a0895e2a309889438d6ba4ed1585355d94cf1d35a049016253de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "a184e8ee-d747-4c49-bd87-7bcbff0dd416", "value": "T1E55302E1B52EEDACD7E5313BB117CACAC41426389BDEC1B39312490406A65CBCAFD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "46db1eac-e8de-42d0-a591-767e7687bc60", "value": "1536:JEmQIssyqAc0G0a5v3RU+9Z/dwLNbkbP7Mp:Y9syhc0GR6+iLNbsP7Mp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "67990ae2-2695-43ea-8ae4-aaeedadf753b", "value": 62816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "2369b235-4f27-4d48-ac0e-b32ce7a7fc81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1acf5d1a-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "56f7167a-f099-4096-bf15-099ee4e2ea73", "comment": "Malware payload (Mirai)", "value": "fd8bb01a2d258ad42c4cffca4309d8ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "27291f2e-1d1c-4d89-b0b1-77f20d7cb1f3", "comment": "Malware payload (Mirai)", "value": "7b0b1cbfbebfaf32ef4dd331e86acf720ac8c7f8eabe9ea91d86db4e8c7d0aa0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "1330ee9f-1b4c-4511-ab4b-5a49e642a744", "value": "T16E639E16E4254948C25945B8B0ECCF3A1F23A5D062837EF656AAC3BAE457D8CF508F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "3042455e-ffad-4af8-9107-1a91a9952551", "value": "1536:Z/cHRKg2AmFGTxxnKcFS07ir1VKCWnJQfWO4:ZUR52AmgxKc9E1VKFSuO4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "3eccb729-a477-45be-b338-0f968b61c5a7", "value": 70972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "e21c0154-4dee-4f66-aa15-885b9aa3ba1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ad4d782-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775638276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "7e95afd4-d23c-446d-875d-72fe41810803", "comment": "Malware payload (Mirai)", "value": "9206de76d56e839409f9bafec45b7de9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "343ecf8a-de2f-429b-be84-2f8b322ada75", "comment": "Malware payload (Mirai)", "value": "087a2c1fd114fde61160b4ee02b220d358f6c858c4f6193dd402d1a34282827f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "9d821211-2336-49c6-abfa-ceb950e45209", "value": "T19DF2F06CD79999D7E7BB6A604F60E7E9BFF38B09B186C98770A1D521800640F8D024", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "a96dc416-c26d-4ae1-aca7-528d2a15e27b", "value": "768:0EZodkE7kj7UdPaI5FRsq8YfUeLLBOJoW3REH57YQsq4uVcqgw09J:0EZod37dD5FRvUeUJVEHT4u+qgw09J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638276, "uuid": "de68a2ed-81d3-4c49-ad5f-50cc32cae323", "value": 35992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638276, "uuid": "29191cf6-ee24-418c-b668-7b36f42463f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cbb8c9a-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775638387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638387, "uuid": "a75bc33d-7c0d-48c9-9798-d0b1f2b1e717", "comment": "Malware payload", "value": "2244220cf958adb2b43c3abdfc2de3f1", "object_relation": "md5", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638387, "uuid": "d56891a2-b687-448b-8c31-f339bf8b8639", "comment": "Malware payload", "value": "3e307376749bf1bec3ff6cbefd0586be3fcaf782254c234fce8013104119929c", "object_relation": "sha256", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638387, "uuid": "ed556501-9a30-4fa6-96ec-7dac05f7c3ef", "value": "T17501D2C5F9A0AAA2C444BE92B061890740DBFBDE13790FA84A9C38F78D5D905B473B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638387, "uuid": "4d76546c-e16e-49fa-8639-e30143cf1fce", "value": "24:GIYcxQZeBLRAZeqAZecKAZe8AZeVZZeImAZePzveY:gcxvFY7mxmZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638387, "uuid": "caf45d0d-6c77-467f-9533-7f14c8e6ca4e", "value": 771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638387, "uuid": "38796d00-f099-4e44-a2f4-bc7f9163d86e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52abafa1-3329-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775638799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638799, "uuid": "2aea4924-6a30-43b9-b1cc-123a50e0211a", "comment": "Malware payload", "value": "6c8c4fd23bf2fc02ee293ebc6f48f093", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638799, "uuid": "a3336c6b-7e18-4d8d-9f69-a5e1f221a509", "comment": "Malware payload", "value": "3fa85c25655e67cfd357367821d8ae8454ed71852766385a443d34de97986e18", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638799, "uuid": "c4d76263-c6a5-4b0f-9d82-cd8f56d516da", "value": "T11843A530A9F45436911386D5AA6C232A29D6F247D74D0120B6ED23B58FCAED7BC374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638799, "uuid": "12ad85b0-1376-4e26-baab-507948f93c4d", "value": "768:pBRJkPPIIzeh/qGP1r8+4vEvWE625BEE0H3lN/IjmAVx5gH8h30LcU:pBIPIIzehiQtz5uE0H3lNAaAL5gGkoU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775638799, "uuid": "2a0a764a-7b2d-43e2-b921-5a0cdd4f3dae", "value": 58814, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638799, "uuid": "7802e1d0-7ae1-4f7b-81cb-e6f1bfdaf279", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a20a831-332b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775639537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639537, "uuid": "6ba70bce-a246-4ba1-8e6d-7cf2afa6352e", "comment": "Malware payload", "value": "7e15f29e9f702f6e2f1860e255727c10", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639537, "uuid": "9343df3f-5e9b-469b-9614-9ead743faaaa", "comment": "Malware payload", "value": "9189499c98ba9a90ecebfb73b559d6bd44009fb7c58ed53f1a103a5b6e51a3f4", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639537, "uuid": "b02d0be6-0fc7-41a7-87d9-943d464402ac", "value": "T1702180CD2010B3E976348F5C7909E5B829C88AC2611392A41C0E397EE2A5E10BE27F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639537, "uuid": "562d658c-0ec6-4370-a1de-54a43cb02be4", "value": "12:KQcUH99QuUDW8NIxQzMxvAW+QuKxBHBQ/FY0KAfkQ6WpQH5AQYSf9QOUcijxxQ93:KWr8NIx2PnK9LlIhy2LBovvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775639537, "uuid": "e7601159-13b2-47ca-b528-4bc47d563b3f", "value": 1153, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639537, "uuid": "65f02f33-e6c1-461a-aa1d-c40fd81ef34a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6bdc971-332f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775641571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641571, "uuid": "772d6bd1-e69d-4f47-8d35-01e125978a51", "comment": "Malware payload", "value": "5160dcdb0666e45cc0e24acf54bb0154", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641571, "uuid": "1d89dbe5-69a4-4d5d-98ff-e2397e71086a", "comment": "Malware payload", "value": "14ddd097c896aec048f96dae86c735e2d70d6f73fe88bf44292413d209ea5d3e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641571, "uuid": "ddfa0b10-3e0a-41e0-a722-a8c52f9513fe", "value": "T10E34ACCA44307170F219BEBE021C949325E0C84F3A97790ED2FDE5A657A03D2B9F9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641571, "uuid": "292beaf6-f6af-46b6-80c9-aad685545313", "value": "6144:pS/ydcz5q8abg7XSxNlab2/E6OTGnQh7yLjXc3+:AKdFKmxDgsE6OKQ1yXXN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775641571, "uuid": "ed5ebffe-c151-46e7-9c88-71e6abcf97d0", "value": 239685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641571, "uuid": "abf4e5ed-a69e-4275-adba-9b810d62491f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28ca94a3-3333-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775643024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643024, "uuid": "07e2ca5f-33a6-4e50-b065-8a0a2fd4a044", "comment": "Malware payload", "value": "cc697ead564e53cc418eb77b27514636", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643024, "uuid": "23686020-2e43-4c6a-aba0-4b30667839c9", "comment": "Malware payload", "value": "06c4777276dbdc6f930571e2b1804f15a1b54c8079d6adad49cddf99b28ddb26", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643024, "uuid": "13e5c8c5-ed8a-4a69-8064-cb5425cfe2e9", "value": "T12A55222035C0C2F3D8B6127410F6CB9ADE7A71765768D2EBB798173AAD503D1A7382", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643024, "uuid": "8b10caf2-bd5e-4a13-8606-acb9d069ce65", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643024, "uuid": "b53261ce-7158-42b8-a2fd-77f2ca3ec885", "value": "24576:qk70Trcz952dvgRH0XYUuLvyj2SRMR1+EVmWU/sq8CFgfpTjc1evxZ4jNo5k9s:qkQTAhYv0LqCJYWhCFgq0fKo5k9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775643024, "uuid": "9dcd8555-7686-4c4d-b423-24ae1cb1df78", "value": 1304064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643024, "uuid": "3b804a76-8596-422d-a0aa-1a5dd5619a12", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ef8a9d1-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775643893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643893, "uuid": "3e9a6ad0-b812-46bc-ba34-3d4acaa8e407", "comment": "Malware payload", "value": "0d824c48144d9baeda40a537d0a09fda", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643893, "uuid": "2d5e29ac-23e1-4a1a-afdb-3d17731a8240", "comment": "Malware payload", "value": "8171c7f377f6e129ba678f46bf3f903c5f64ff580d9ad47c0a73a03028d5bc4b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643893, "uuid": "ca4edbaa-2fde-4238-8ff1-854fe98f926f", "value": "T1CB34011DD28FE598781B8CB59BD93BCAB4C1F53A8E12B05A851B2EDB4FB43130D781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643893, "uuid": "bce3328f-31c1-4395-8085-16428d8721ec", "value": "3072:uFvPwCzIcpDj+8/ei8TuY2MuQXeYM0s4bEcRUqxCfkFAn/CGbXSG3vtuGWZWrc4U:uFgCTFUA8XsLAUqP4bSGfYtZfa/C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775643893, "uuid": "81c9f477-7973-4f99-8a56-85184d4fbdd3", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643893, "uuid": "ab5596c0-91d8-4f25-86ba-a77870f5e6db", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "532dc323-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775643954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643954, "uuid": "a86a41d3-28d3-4da4-8407-537976274204", "comment": "Malware payload", "value": "68f30f2f7525c3d211495754a458c249", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643954, "uuid": "f511a535-f549-471f-bb8b-17a2c1f6e431", "comment": "Malware payload", "value": "62e1afaa0557c0e9db644b8f5aee18738559785d365a0e091af06bd5705918a8", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643954, "uuid": "045768af-08a3-4540-adb5-c0d1baacb189", "value": "T10011049759048C15422483696CD0F5048887D24B47C8E8C475D7D0FE54A57D1C6BB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643954, "uuid": "9634afe6-7dfa-48f9-86ad-b96d20835c1a", "value": "24:0p/P67YHRFDZnN/fnN/SeKhV1vObKwPWBNVgclJM:0DD9NnNkhV1v3wW1JM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775643954, "uuid": "fd6490b5-24f8-412d-a80e-f4e7307748f6", "value": 904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643954, "uuid": "fdf059cf-206d-4034-ae18-c1003740d567", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92a38afb-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775644061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644061, "uuid": "5908bbf9-2afb-43ec-8825-26c72ba8b11e", "comment": "Malware payload", "value": "366d59ad5c92a604600b7837e93c560f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644061, "uuid": "97e2c0ab-3712-4c6c-a5fe-17d85dc9b6bf", "comment": "Malware payload", "value": "5d2322a49f78b75c697dcedcd9c1e6c07efda79a763dc1748aa53345ebe4c48d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644061, "uuid": "1339bede-3335-49c2-b410-d41ebee3b494", "value": "T1CED3AE8B8D9E88FC431F75A90A2B1C43D64B5163266DC590BEFEFE963F22D7020958", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644061, "uuid": "d4ad123b-7581-4657-9296-dc0b448dc88c", "value": "768:20G444YQyo376GUNfBdtSYMILKSGhoguJ27IThsVFoJkwnVeB/gNCNSNVNNNFN3Q:i444VJ376GDERg3PSCx7nkv9sQM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775644061, "uuid": "38a7b2f7-099a-4221-b44a-66388aad0eda", "value": 141270, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644061, "uuid": "7d8b5f43-2cb1-44bf-9f7b-78be0ea4303b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5a0e44f-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775644119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644119, "uuid": "4d3652fe-cbc5-4228-b758-1ff0add38c43", "comment": "Malware payload", "value": "a35bce35cfba9e85ea2cab8dfc5e9962", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644119, "uuid": "ea144a28-7407-4554-a136-f56e41721756", "comment": "Malware payload", "value": "4c0c48558754fc8efebcf9e6ec41a1d0e145fdf2a7f6e76d340e2e7e1bdc2487", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644119, "uuid": "19b4ec9e-09c5-4eb8-ab2b-75dbeeb3fecb", "value": "T1C0A5010453B99201E07B133B94B4060443FEA93BDDEAD32D63956CEB29D7789573A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644119, "uuid": "b2d13f84-ba3d-4822-93bf-5246e40f3560", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644119, "uuid": "248d0196-9e3f-4b7e-a729-56f29e3be586", "value": "49152:b8Ff3SjIa9za2ZKZ+Om6k+OG03ppzDWA4iv9+r39:b89GIqzCe+ObppzDWIv9+r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775644119, "uuid": "0d67a27f-f741-401a-b15c-07aaefd8d6ce", "value": 2123776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644119, "uuid": "ee6060a5-6e9a-465b-8406-464a46168f9f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cca6632-3337-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775644749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644749, "uuid": "a2d9fa7d-a9b4-424b-9828-ce2ceef9e3b9", "comment": "Malware payload", "value": "bdc3befd090420e398624097e08382d5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644749, "uuid": "4320b2e8-ad00-48f1-bb61-2c5005a4d9cd", "comment": "Malware payload", "value": "8abba35cc6efcb85ea18e70abad2c73901d9676a13d451e1a5135a0a949a7a1c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644749, "uuid": "421c9d0b-dfa0-4a16-9ec6-3cc05c3362c9", "value": "T171D321CBC99AC4EC971F602D455FAE02CE4EA513191DC5B2FADDAE853F12C7071AA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644749, "uuid": "cddbf5b7-3825-40c2-8f45-21753a481bee", "value": "768:RrNSFzt7pYZyu7o8OG6YHb9qrOVZyK4b12wu6JW7slL9z+sbVj/f4ZrCRlDw1PRf:nCYNDouSwoMHNd54aXMupQyxI5c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775644749, "uuid": "2dc997be-29e8-4abd-97f2-ac304f05f46c", "value": 138522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644749, "uuid": "c41423d2-8f33-4a53-89d0-4e0c912b8c83", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34340c23-3339-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775645620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775645620, "uuid": "d5c6999c-7d31-420c-8d96-6ecec6d747a3", "comment": "Malware payload", "value": "362ff439d7712a1a385b8a277502c3a8", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775645620, "uuid": "9d119dea-3050-4211-8f0f-e4d9ad9ed682", "comment": "Malware payload", "value": "e723dd7a655f93845893140fba3c08f896158204982d6f4ea10e60ceb6204c69", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645620, "uuid": "6a25ffaf-6a47-4fdd-b7a7-83ab39f69337", "value": "T14086334B21D0E678C0FF12344EE64A16DBAFE10433A88477B9145FAD1E695E9B2353", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645620, "uuid": "f44fa12a-6059-47b0-a4fc-2cb97ca9710f", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645620, "uuid": "c2761500-6c6b-41aa-9b3a-0e90a9c9a67d", "value": "196608:+ASvsN5K6S27k5etfIryEpBvfpEcFdahtPozutJoexmHBKgoqXSWUrYn:A0N5K6gNVBEcFdaMStvxjV9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775645620, "uuid": "619452ba-e108-43b1-a5bd-3668984ebcef", "value": 8614400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645620, "uuid": "17b970fc-f538-44ea-b98c-5dc622e4a3d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae8a8c1e-333a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775646255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646255, "uuid": "7d160d7d-c07c-4c52-951a-c447c70bcc3f", "comment": "Malware payload", "value": "da46700f967806d147cd56a94366cf32", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646255, "uuid": "148e0dbc-73c2-4291-a09a-01b1cb855209", "comment": "Malware payload", "value": "a0c3dc8c6d5772befd3f5885703bdf0e9c756986af7185dbca7f44a9c1500808", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775646255, "uuid": "0eeccd56-0aa1-4ab5-ba44-290a865b2c48", "value": "T1F8D43BEC31ADB6265EE342F5106F1507B2782823580C8860F121EDBD37B999951BBF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775646255, "uuid": "6b1351d0-41b4-4913-8596-8282efba59d0", "value": "6144:T69o4f0ENXYoJTwiZ+N30pzozzGql4erLnQEsDFx6FuPuuNp1m8LcgigN2kI/:mZfxNXC930pzoZlzo7IFudN+9j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775646255, "uuid": "f2079fa2-3c1a-44fb-8328-ee88b770ed09", "value": 612446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775646255, "uuid": "446959c9-0621-48ac-acda-2176d5cd3522", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d70ec36-333d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775647461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647461, "uuid": "e797cbf5-4649-4577-80f9-ba1419e9bc3c", "comment": "Malware payload", "value": "da11c4dfa4c0c1f23ff45faad7e92c99", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647461, "uuid": "38625492-fde5-4790-a872-ee017076e7d2", "comment": "Malware payload", "value": "f5df8fb9e743b38a5889719f419784178974ce63f0d33a8f5156f77cd64ce5b7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647461, "uuid": "00d3501b-e36a-4818-86d3-411f74f9e378", "value": "T182D30FCF5A8E88FC871F6424095F2C47D68B5127051DC5A0BAEFFD983F61D68A29E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647461, "uuid": "0b11cde1-5d39-473e-9523-79458e39b37d", "value": "1536:1ofVu6fhxbvXuWjH2wwpdLBNyQFaFwEQz:8cptBNyQF6Qz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775647461, "uuid": "44a63e13-81ea-48e5-9d96-a582abecfdfd", "value": 131558, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647461, "uuid": "6706a2da-0b3e-4d63-b007-2d9c619085c1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3beb959-333d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775647552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647552, "uuid": "fcce452a-9b30-4174-94c6-f8aee33bc46c", "comment": "Malware payload", "value": "8e37d97bf0e85ba01be4832ab2eada08", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647552, "uuid": "deb89178-e2e2-4878-8938-dc152d892cf6", "comment": "Malware payload", "value": "25f36ea7b3a6f7903352aa92df59aa508e06b14b75ddc6fc990b0d515e11c3ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647552, "uuid": "9c0212b4-bca2-4f73-9beb-5a28ade18f9a", "value": "T17624D0704DFA3B8F42D38405131A8F55AABBD30A4015C3F2B2D7ECEB74499915D49E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647552, "uuid": "be259a92-0dd1-4df5-98cf-9db6762c7572", "value": "6144:yDJ2dhPDiikTl038YaQHPRcNBOtYMKyeXI8HdAkDp5:a2mFxSaQpc/OtYMKy09AkDp5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775647552, "uuid": "158656a7-506d-4e14-a9c9-bdc04bb942aa", "value": 213072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647552, "uuid": "5e82c91e-e5b2-4e05-9c89-a09c5f58b338", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1b43cfb-333e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775647978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647978, "uuid": "8360b2d6-d4e3-4759-8b21-123d93c51e38", "comment": "Malware payload", "value": "9e25ae3d7cd667024662397a0574bfe6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647978, "uuid": "5de4946c-97a4-4695-a31a-cef3ad1611fb", "comment": "Malware payload", "value": "dba745290d7b4b0764bc75280010aa63dabf915ece983fecf5397e551dbdaba3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647978, "uuid": "91315d68-4f9f-456a-a7f4-307595c3bd5e", "value": "T14DE33F6D0A9F85EE1657A868412B5043EFF1432B870EF6E6BF1DFAD53F04098A0DA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647978, "uuid": "350c4fae-da77-4008-b20c-03e408f5abd6", "value": "768:MHB4ZD9F705kMBlBxxP04QZiNs/IiH1pM9JZ4HUEO4NpOx+jXJKWnvMJ:K4Sp4CqIihUEO4g+jZA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775647978, "uuid": "e273d202-9483-4d8f-b393-23e1d300fbd9", "value": 144909, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775647978, "uuid": "749f524a-b65c-478f-b850-42f376f6a2b7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41ae250b-3345-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775650797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775650797, "uuid": "bb94e9cb-ff8e-4cb7-b912-e3a7d3701383", "comment": "Malware payload", "value": "84635190cd986be4bdd641ebe75d9b37", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775650797, "uuid": "676fc776-716c-4b8f-81e2-4c4be25c2305", "comment": "Malware payload", "value": "70120cefd35ff1b2c8a315601caeb7e17fd558f1d6e048935789748826672923", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775650797, "uuid": "81e27fe2-74d7-41de-96fc-dc4934718f24", "value": "T1D18309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775650797, "uuid": "41136a92-94ed-4f4d-b7bd-b436f7eba2c5", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbntWaNVN/:XEKltp9txAX/yr2pbtWUVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775650797, "uuid": "8e765c4e-bece-4572-bd9f-32ecfc3e5f5a", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775650797, "uuid": "4f856ce4-2073-419f-a578-e945c01500e9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a3297bd-3347-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1775651670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775651670, "uuid": "ca3a7aa9-aa67-4152-9182-b272c894dfa0", "comment": "Malware payload (Adware.Generic)", "value": "385d74adac7a1120afb599707ea4ac2e", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775651670, "uuid": "0fcf970e-9ae6-4548-a01c-8d9d0e80fc21", "comment": "Malware payload (Adware.Generic)", "value": "8e527b2329cea7cd66a17d94a9f36347ef9d2e58d498c9de51f1aa77ccd00660", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651670, "uuid": "f90be954-f30a-4c91-a0da-cfcd14115ccb", "value": "T123A6233FB268653ED5BE0B3249778260997B7E91B426CC1E03F4290CCF765601E3BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651670, "uuid": "d5f7c06b-560e-46bd-aa95-43d1fa971624", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651670, "uuid": "6cdebbcd-9802-4d64-9a58-7399368a16c4", "value": "196608:meDi7aFsIoIEsNLq5bR4xa6Ar4/G1k+wBjhRw1Y0cwREna0Kl:dW7aFssEMzxa6ArGQk+wBjUe0TR2ZA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775651670, "uuid": "3aba7f69-e4f2-4eed-b3fa-be6af72f4348", "value": 9509793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651670, "uuid": "29035ba8-3c94-4699-98f3-b6c559c7f7ea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2499cda-3347-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775651818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775651818, "uuid": "261837b4-96ee-421e-b788-5e26fa938af8", "comment": "Malware payload", "value": "45ba06a516a791302d5d86386c046bcd", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775651818, "uuid": "0e41bd40-0a8d-4b1b-a6d9-a6ad4271e98b", "comment": "Malware payload", "value": "b16418178685a02be838dd02229be806b32ee95b4bb94d03f62601c6cbfdd74e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651818, "uuid": "a65b01ed-6f3a-4ebc-973c-04177d244418", "value": "T1100402B333054AFB6D7BC89FBB1988E940BD7F0103E060E2D66A6A94D5A4B52C1F57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651818, "uuid": "f1fb6e8c-897f-4dc7-93bb-941d196e7d47", "value": "3072:0Kr+UdGI3aKajkfSY+ose6auYkm6plJikHUBWP2owvky5aLpO:3UY2UeaUtp273aLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775651818, "uuid": "119ffebf-83c2-45c3-a5e6-16918908c211", "value": 175921, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775651818, "uuid": "ed2444a9-0585-4504-ab10-fb2b5553374b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "032717f4-335e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775661429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661429, "uuid": "36e8952d-7c31-4905-9fd7-2ffae6e0bb6e", "comment": "Malware payload", "value": "3d2d51add1a1989c1e7cef9ab0b5c6c6", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661429, "uuid": "c3479c0f-f2f9-48bb-a3e0-d33dd98ca245", "comment": "Malware payload", "value": "053620962047f50a91c6e8d1a6519eccc41fab51473f033086b4d816abe8bcb0", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661429, "uuid": "84ccc486-2497-4dd5-9663-95ab4663aab7", "value": "T14BC2D03B92785215C2379FF802EAA96AED2DDB04B660708B067D326DCDD33D21B453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661429, "uuid": "23d3a5c9-cf5d-4c27-b6e3-8ddede1123b5", "value": "768:lU2P/NU6GowBxYeIQHuqZui0AGZtXMY2K2W0+:lFP/3G/BLIQruiLR9Wr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775661429, "uuid": "c0988b9d-92e1-475e-81c2-0048827ed9c6", "value": 28203, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661429, "uuid": "14957a96-1e44-4758-968d-05a415183ef2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "641e68a0-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1775662629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662629, "uuid": "68789cb7-2b1b-4f43-8cf9-12d0c390161a", "comment": "Malware payload", "value": "365c5c1978d08459d981ffa2012544cc", "object_relation": "md5", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662629, "uuid": "d3056021-4964-41bb-86a7-78e13ad980ec", "comment": "Malware payload", "value": "6bce2dd7b61a662650ffa16e886d1f3da01377841882bbcc4081305d17b14f57", "object_relation": "sha256", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775662629, "uuid": "ca1c89f5-4df6-44b4-9942-690ecec105af", "value": "T1F4D57DDE194555E2D3FFB7A0C2B42E2E267173325C67691BA2FCA1C8CE103A66D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775662629, "uuid": "7b23140b-6489-4312-b0a6-c699e477a71a", "value": "24576:8+EhkjiYLXR+bG/f2mtFfsqD+n0tkR5JoiVsgV+PYDlJBK3xrcG0dAtVJlzFrpf0:8UiYbI27TGJos+PMeIGlVTFrRid3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775662629, "uuid": "38d1f46c-88a4-401a-aad6-c82cbb3dd023", "value": 2939030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775662629, "uuid": "1efcd536-7226-42b0-bd83-5f36abe5f5e6", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4e24187-3362-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775663499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663499, "uuid": "3a47886e-6cdb-41d8-8985-b9df1edc5bfb", "comment": "Malware payload", "value": "dbda99e7404451403054c7238082aa19", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663499, "uuid": "0b8d6b98-8c23-44d4-be22-2b1da769e70e", "comment": "Malware payload", "value": "8ab41a337aa2799c71cdf79d04b00764870dd068e21e4c1521be06459864760d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663499, "uuid": "36e4d765-d994-4cbb-9fbc-79f43e895501", "value": "T1B6931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663499, "uuid": "4c94d661-e520-462b-b8b9-4c83c4e5699d", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKz1sPyKUt8:08jIL0GitkbFv2v05xspr91sPybt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775663499, "uuid": "4bcd8e86-9ea9-441a-b732-9ce57135b940", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663499, "uuid": "f37bcd7f-b5b2-4102-a145-2f2a10306028", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2886dc2a-3368-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775665787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665787, "uuid": "d26095f8-5609-439c-847f-9a195a2d3168", "comment": "Malware payload", "value": "f9d08feaa1c82e55cd1e2a4c6ee3a50c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665787, "uuid": "019b14ec-9b17-4355-9969-1a046a53b309", "comment": "Malware payload", "value": "359d92ac87a3e1577b204be8f468b0bb161bf3b75b844b7cc5f65983f85fd1e3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775665787, "uuid": "49e8d179-440d-4c1b-9fdc-42bb6c0cbf03", "value": "T19A93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA623895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775665787, "uuid": "5de9fb6b-920f-4626-853b-10fa9a13c3e4", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX2IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775665787, "uuid": "5a75ba49-1f1c-4b19-a4fe-a2ad55e777c6", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775665787, "uuid": "bc3e5672-9c2a-47c6-8748-9b835612d76e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f67644f0-3372-11f1-bc00-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1775670427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670427, "uuid": "e936d39d-645e-4d94-a1b3-89ea1100a5e3", "comment": "Malware payload (njrat)", "value": "2cbd959c38fb466998473f8e5c2110f7", "object_relation": "md5", "Tag": [ { "name": "178-16-55-23", "colour": "#960ebf", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670427, "uuid": "d1eda6b9-75e5-4b77-ab0e-b431073a44d3", "comment": "Malware payload (njrat)", "value": "f2c42c7641fcae4a61d7e6c183b06f9f828bd337f08ecba9f97033556540e52b", "object_relation": "sha256", "Tag": [ { "name": "178-16-55-23", "colour": "#960ebf", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670427, "uuid": "050d5dd6-1482-42a2-a333-d8f58028c873", "value": "T154B533314A930924FC55A4B71BB3E2930E4DF426FD87424E6168E9AE7317E7279293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670427, "uuid": "4b3017c7-d940-4a8d-8cf2-ee837a210e5c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670427, "uuid": "87b8247a-2375-4850-90d6-25b6113bab1d", "value": "49152:k+DQS54uk9F8ktHgkcC7GSdHKC88Ro3m18m0Ar:k+DD4t9jTRo3q8Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775670427, "uuid": "de1fc48f-f138-4265-9458-3750d3d6ef7e", "value": 2468864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670427, "uuid": "11e97d81-948e-499d-9b88-a8abe1aa208c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e9a275e-3376-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775671810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671810, "uuid": "4383297f-5767-4346-b59d-b62747c39bc4", "comment": "Malware payload", "value": "abf1f8d376c06f6f6124a6829986714a", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671810, "uuid": "5cb1f949-8877-4c58-a895-8cc62ae0d54c", "comment": "Malware payload", "value": "e2dd74e1f664c0ede1d3d8412669e26a5b6d0f026f1d3e64965c17a677fb27c1", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671810, "uuid": "d57ef019-c127-4f3e-bf08-79ac1cf7b544", "value": "T124D43977423478D2ED0BB3B5BBCB367BFA84B9382170E4955A0257294DF46B2DE042", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671810, "uuid": "e85240d4-a385-4508-8175-90027ffa920f", "value": "6144:plSfdQV7gERhqo32F+g8wzq8VBwZfyvXOwUH5Su/D7i0gtpp6mYSzD11RDFQZY:pA07zqo3k+g8wzqaBwFyv+9fMp6y1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775671810, "uuid": "c396a508-524a-4964-b456-8c390495e913", "value": 639600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671810, "uuid": "b30a6159-4bdc-41b3-ba47-f64d35580042", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775672059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672059, "uuid": "15909b43-a33d-4199-a3fc-6585a1fbcf50", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672059, "uuid": "b36e3a64-9cb7-4b5b-aa84-20e61794c436", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672059, "uuid": "f0dafb6b-6d83-42f6-9526-5ca2fd16ac2f", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672059, "uuid": "ab02eb28-72f7-446a-b356-788bdef5ffd8", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775672059, "uuid": "28cbb362-3d95-48ad-990d-cf7b919f2d53", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b31fb0c7-3392-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775684058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684058, "uuid": "67570b9e-ac8f-43ff-9ca2-6e3a94a7e1da", "comment": "Malware payload (ConnectWise)", "value": "ef4fef77520e8903793fef6c63256e1d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684058, "uuid": "984eaf0c-2f4e-48ed-9026-10b4908c0f78", "comment": "Malware payload (ConnectWise)", "value": "febcfb36c602a9b9e37076ae29b0f8a650cdba5d263b458729ce27fb1e443218", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684058, "uuid": "11d4df52-d7d6-49a7-b730-b349fee1426d", "value": "T18DD622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684058, "uuid": "d483e549-ea46-4865-bdd7-30445b61dd55", "value": "196608:NHxcp9ym3nltDUJVTHxcp9ym3dHxcp9ym3xHxcp9ym3wHxcp9ym3gHxcp9ym3ZHc:/GplpEGpPGpjGpeGpOGprGpz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775684058, "uuid": "e86972c1-78a6-4cb8-81f0-1bfe247c9aa6", "value": 13541376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684058, "uuid": "1f74622e-ea9a-4d30-b9ad-ce057f07e9fa", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ed37aa-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775684531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684531, "uuid": "8bf8a059-ce48-4b8c-af40-7c742876b4bb", "comment": "Malware payload (Mirai)", "value": "f33e3ad3d114f55dc0ead8f17c21153b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684531, "uuid": "41c7c32a-03ca-448a-bb19-787630ab40ae", "comment": "Malware payload (Mirai)", "value": "21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684531, "uuid": "c8bac044-316f-4068-883c-81d778798cc9", "value": "C564C08AED00AF61E4D521B9FA5F034973634BACD3EAB111E6249B3437CA65B0F7B045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684531, "uuid": "8aec1aa5-ae2f-4805-90e5-6b435e4797d4", "value": "6144:2IIKXhZtL7jOTyIG87XTabE5wKSDP99zBa77oNsKqqfPqOJ:ZTj8w6TabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775684531, "uuid": "d5cadef3-5b20-4ee5-b1d6-c8a078fab47b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc9671af-339e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775689336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689336, "uuid": "566117c2-f757-4b8f-849b-43c87f9d0c0d", "comment": "Malware payload (Mirai)", "value": "c963de8a729a1557d9559c623518f13a", "object_relation": "md5", "Tag": [ { "name": "94-156-152-233", "colour": "#1a4f54", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689336, "uuid": "884423ee-0ccc-4bce-95dc-8f4b68c50746", "comment": "Malware payload (Mirai)", "value": "e37f3a3fd6f0baac3b548e25172f2ce4ff8eb9e85ed59f6363254d71bc873da8", "object_relation": "sha256", "Tag": [ { "name": "94-156-152-233", "colour": "#1a4f54", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689336, "uuid": "75bb9979-5276-4069-a6cb-8832b3bef009", "value": "T1B6F33A41BB43CAF3D40304F051A7A73E8E31FC2A4437D5A9EB68BEA5DA175C1A2167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689336, "uuid": "9bebdb9b-bee6-436b-862d-2565f18f6be7", "value": "3072:BQ7ZRH3nG9EpSOG8Cwhp0RgQVNyDsmdVv1b:BQ7ZRH3nG96zZuFAVv1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775689336, "uuid": "f0983f34-540f-404c-a518-c97809ad19c9", "value": 161072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689336, "uuid": "da540a5b-c81e-4d9f-9e95-fd157782bf6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40cd8a71-339f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775689450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689450, "uuid": "ee1e3c81-6af1-45cb-b4bc-92a6ff26cca4", "comment": "Malware payload (Mirai)", "value": "4dc3ec5bf3e0c1ad0f72a77b33a24847", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689450, "uuid": "22f6ebcc-f375-4494-a37d-1c347af57b90", "comment": "Malware payload (Mirai)", "value": "9d36aecf683aea4077b365d5136374eb3a58b79e208f86a8a5885d7534b33ea6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689450, "uuid": "a957919b-f96e-4a92-a928-fef2b1728efc", "value": "T1C7044B07BAD1C9FEC487C1F44BEAA5369D31F81E1539719B3794BEA15F0CDA02A1C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689450, "uuid": "339895e9-2398-4f13-a2d3-56b5cb5a6c59", "value": "3072:Otm11asN8Xhm6AMOf8nSjaZX9WotW+5reIivW1J1FkMuMevNSDd4An9DD9O:Otm11asN8XQ65Of8JBVMILhISX9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775689450, "uuid": "7a621cf1-68d6-4de1-9eb6-b2d3ecfb068e", "value": 182896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689450, "uuid": "002c11d8-a569-46c3-9951-8d2bcfa86331", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606420, "uuid": "eeee06c1-32dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.107.139.197/VCPG", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606420, "uuid": "ef4a3810-32dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.107.139.197/YIJF", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606526, "uuid": "2e857f5f-32de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-io.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606711, "uuid": "9c42671d-32de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-node.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775606947, "uuid": "293a632b-32df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thickentributary.digital/script.sh", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607067, "uuid": "7069c087-32df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-api.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607368, "uuid": "23fa29dd-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stream-gate.noeticstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607427, "uuid": "475748e8-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:36762/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607436, "uuid": "4cd67cae-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.10.209.143:37698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607558, "uuid": "95416fdf-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.43.101:36878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607730, "uuid": "fb9d6c8a-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:57432/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607730, "uuid": "fbbea9d7-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:57432/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607730, "uuid": "fc1a2f3d-32e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-vault.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775607913, "uuid": "68bb12ed-32e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.145.181:45140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608092, "uuid": "d38b7810-32e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-audit.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608390, "uuid": "8566c621-32e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://know-logic.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608521, "uuid": "d3848360-32e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.45.141:54173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608628, "uuid": "12fa6ecd-32e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.170.166:45571/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608748, "uuid": "5a8d0e95-32e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.130.87:45402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608873, "uuid": "a4e2f1d8-32e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-secure.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775608880, "uuid": "a96fc402-32e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.83:47190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775609119, "uuid": "380f616e-32e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.103.117:43991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775609167, "uuid": "549a0e81-32e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://source-hub.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775609183, "uuid": "5dcdfb63-32e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.211.109:39020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775609227, "uuid": "7829614c-32e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.170.166:45571/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775609527, "uuid": "2b194ebf-32e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://truth-svc.gnoseologiccore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775609889, "uuid": "029538f7-32e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-point.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610018, "uuid": "4fc8a8de-32e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.45.141:54173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610186, "uuid": "b40f6f25-32e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-logic.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610439, "uuid": "4ada39cc-32e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.103.117:43991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610488, "uuid": "67f6f057-32e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.83:47190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610553, "uuid": "8e78179d-32e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-api.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610847, "uuid": "3dc49775-32e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-node.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775610920, "uuid": "69778aac-32e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.130.87:45402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611027, "uuid": "a92558bd-32e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:52249/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611213, "uuid": "17a90d91-32e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-vault.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611397, "uuid": "857762ce-32e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.38.3:34774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611568, "uuid": "eb4f97b3-32e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-portal.epistematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611660, "uuid": "2219dd7d-32ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.60.109:39995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611749, "uuid": "575cf87b-32ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/mercy.exe", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611926, "uuid": "c10aaaac-32ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.223:32865/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775611930, "uuid": "c337529e-32ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-gate.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612232, "uuid": "77237504-32eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://real-io.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612530, "uuid": "28cdf92a-32ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/WSW0", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612589, "uuid": "4c42e08f-32ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://being-log.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612827, "uuid": "da2831eb-32ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:52249/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612889, "uuid": "ff032467-32ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-node.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775612947, "uuid": "21bd5c1c-32ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.60.109:39995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613247, "uuid": "d48897a6-32ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drift-svc.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613257, "uuid": "da4c5dff-32ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.21.149:40518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613547, "uuid": "870ae588-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://entity-hub.ontofluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613608, "uuid": "ab670591-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/CJXI", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae924a8b-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/XVSD", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae924f33-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/NKOQ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae92540f-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/WDRN", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae9254ea-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/SKYA", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae93b159-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/NSYE", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae947a6e-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/KALL", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae97ff4a-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/WHKH", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae980e7a-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/GZRN", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae985100-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/TSFJ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae985b15-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/REIU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae9b2868-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/QBAH", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "ae9c8ed0-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/KEWW", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "aea3feef-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/QSZX", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613613, "uuid": "aeae8f5d-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/GWVG", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613620, "uuid": "b2947578-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.8.56/XRLD", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613625, "uuid": "b5d12046-32ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.130.176:35507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775613971, "uuid": "83ef3a14-32ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sphere-api.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614210, "uuid": "126052da-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://law-check.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614327, "uuid": "5813c21a-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.247.67:32873/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614328, "uuid": "5881a9f4-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.57:36912/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614328, "uuid": "58d7fce1-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.215.35:48784/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614329, "uuid": "58e8c95d-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.56.82:36883/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614329, "uuid": "58f26b9d-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.70.44:60783/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614329, "uuid": "59190d25-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.205.127:39991/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614329, "uuid": "591a06c4-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.69.90:32894/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614331, "uuid": "5a3cf21e-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.69.90:32894/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614331, "uuid": "5a4331ec-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.141.207:47976/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614333, "uuid": "5b7a1c45-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.178.109.75:33095/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614333, "uuid": "5b7fd8a6-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.178.109.75:33095/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614577, "uuid": "ed3c7ba0-32f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.21.149:40518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614628, "uuid": "0b5166ad-32f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixed-point.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614628, "uuid": "0b570570-32f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.88.187:38331/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614884, "uuid": "a43675f6-32f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.130.176:35507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775614928, "uuid": "be592260-32f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-logic.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775615227, "uuid": "70785525-32f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-vault.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775615587, "uuid": "473dd63e-32f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-node.axiomaticsphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775615888, "uuid": "fa423a95-32f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forge-svc.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775616310, "uuid": "f5d5ba65-32f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://synth-io.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775616608, "uuid": "a7bcb33c-32f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-check.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775616968, "uuid": "7e07ae95-32f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://debate-hub.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617030, "uuid": "a2f85be2-32f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.181:58616/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617269, "uuid": "31797586-32f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thesis-log.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617459, "uuid": "a31901cf-32f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.234:34944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617633, "uuid": "0a5e5d81-32f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-gate.dialectonforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617638, "uuid": "0d6b0f96-32f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:36198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617818, "uuid": "78eee808-32f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:36198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617927, "uuid": "b9ffbb45-32f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:56858/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617930, "uuid": "bb441444-32f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://infer-unit.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775617999, "uuid": "e4a5c056-32f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.234:34944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775618227, "uuid": "6cd9bd02-32f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-node.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775618287, "uuid": "90153cc6-32f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:54586/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775618591, "uuid": "45d510a0-32fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-mesh.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775618852, "uuid": "e1184aab-32fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.252.145:42905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775618948, "uuid": "1a6a532a-32fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-api.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775619313, "uuid": "f3ca9166-32fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-wise.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775619427, "uuid": "37b1f2b3-32fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:54586/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775619607, "uuid": "a3218484-32fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-vault.inferenciumgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775619619, "uuid": "aa40d4e4-32fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.206.215:43250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775619973, "uuid": "7d562a3b-32fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-secure.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620048, "uuid": "aa3f15c2-32fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.198.237:38241/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620220, "uuid": "10ba39cc-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.106:58653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "c4171eb7-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "c4171f70-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620521, "uuid": "c4173f2e-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "c555d6ba-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "c555edf6-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620523, "uuid": "c562aa12-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620524, "uuid": "c5697a7c-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620524, "uuid": "c5986849-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620574, "uuid": "e3495394-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-check.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620589, "uuid": "eca47486-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620590, "uuid": "ed0f7cb9-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620590, "uuid": "ed341609-32fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/bins/jew.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620750, "uuid": "4c872461-32ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abstract-io.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775620931, "uuid": "b88d86e0-32ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-port.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621352, "uuid": "b36eb595-3300-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-unit.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621361, "uuid": "b8ddce9c-3300-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.177.10:57694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621652, "uuid": "660e8967-3301-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://theory-log.theoriconhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621773, "uuid": "ae5c257b-3301-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.42.208:59802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621826, "uuid": "cdd4f702-3301-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.163.34.244:64487/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775621960, "uuid": "1d68a124-3302-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.106:58653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622015, "uuid": "3e4777c1-3302-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer-check.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622128, "uuid": "818d7f74-3302-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.39.113:53906/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622316, "uuid": "f1a48baf-3302-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-stack.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622374, "uuid": "1450025c-3303-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.193.82:52488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622674, "uuid": "c707bd50-3303-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive-hub.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775622920, "uuid": "59ce2650-3304-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.2.132:39784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623027, "uuid": "9982e05d-3304-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.177.10:57694/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623032, "uuid": "9cb97b6a-3304-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rank-index.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623267, "uuid": "28e875b4-3305-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-svc.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623394, "uuid": "74493c3e-3305-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.94.93:47019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623692, "uuid": "261e37e5-3306-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-route.systemicitylayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775623994, "uuid": "da1e1cf0-3306-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-point.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624003, "uuid": "df93bb7f-3306-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.225.176:36721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624004, "uuid": "dfb9b040-3306-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.2.132:39784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624004, "uuid": "dfc2e118-3306-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.42.208:59802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624227, "uuid": "64f8693f-3307-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.252.228:51488/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624228, "uuid": "6541edc7-3307-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.130:52873/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624287, "uuid": "88b507c3-3307-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://think-node.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624418, "uuid": "d685061f-3307-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.193.82:52488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624587, "uuid": "3b554b79-3308-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neural-io.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775624953, "uuid": "1571424e-3309-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-api.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775625310, "uuid": "ea600335-3309-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-svc.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775625381, "uuid": "14bc31a7-330a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.36.223:54421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775625444, "uuid": "3a7c404c-330a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.60.245:35502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775625672, "uuid": "c1d7fcd6-330a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-log.cognitrixvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775625921, "uuid": "56d1e2d1-330b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.225.176:36721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626027, "uuid": "95b1635a-330b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.130:52873/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626028, "uuid": "96983d16-330b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.111.196:54539/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626029, "uuid": "96aacc98-330b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-point.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626219, "uuid": "07e9b1ec-330c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.204.71:46266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626388, "uuid": "6d19ee30-330c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tower-sync.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626581, "uuid": "e025f9a3-330c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.60.245:35502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626581, "uuid": "e02a81c4-330c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.52.205.167:58619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626626, "uuid": "faaaa2bb-330c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.129:34755/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626630, "uuid": "fd0fbb50-330c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.0.99:47760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775626686, "uuid": "1ec926d8-330d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stone-api.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627048, "uuid": "f61918cf-330d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pillar-node.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627090, "uuid": "0f1e52cb-330e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.56.82:36883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627116, "uuid": "1ece292c-330e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.18.46:37347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627178, "uuid": "43dfb3d0-330e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.18.46:37347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627227, "uuid": "60cf6549-330e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.111.196:54539/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627348, "uuid": "a90c943f-330e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-vault.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627358, "uuid": "aed72ade-330e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.80.138:46688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627779, "uuid": "aa44409c-330f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.103.178:46035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775627827, "uuid": "c6670825-330f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.156:46840/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628012, "uuid": "350c5ad0-3310-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark-svc.ministobelisk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628188, "uuid": "9d8f1812-3310-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://skin-check.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628380, "uuid": "0ff34c11-3311-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.70.44:60783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628428, "uuid": "2cdccf68-3311-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.174:53866/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628494, "uuid": "5417a4b5-3311-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-node.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628727, "uuid": "df509eca-3311-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.129:34755/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775628851, "uuid": "292cfc5b-3312-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-api.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775629089, "uuid": "b6892277-3312-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://egg-vault.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775629098, "uuid": "bc415b39-3312-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:46702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775629333, "uuid": "4829b106-3313-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.156:46840/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775629333, "uuid": "48708ca2-3313-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.174:53866/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775629510, "uuid": "b1a7cee3-3313-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scale-svc.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775629809, "uuid": "63cab1aa-3314-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://track-hub.pairingreptile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630169, "uuid": "3aa4a6eb-3315-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-io.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630418, "uuid": "cf30f2ee-3315-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.126:48943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630476, "uuid": "f158ddd2-3315-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.167.27:60366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630529, "uuid": "10dedd1b-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-flow.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630529, "uuid": "10fb6069-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:46702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630647, "uuid": "579715f0-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ampgg.bossjy.cc.cd/bot.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630648, "uuid": "5824e2ab-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winstonchurchill.rf.gd/img_175626.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630649, "uuid": "586dfb5d-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.90.19:6600/6u4qx637/PGWXEIBP.msi", "Tag": [ { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630649, "uuid": "586ee096-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://goynetfiles.duckdns.org/loader.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630649, "uuid": "587e3c79-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/craftpedro62-debug/_s/raw/refs/heads/master/sass/utilities/randll32.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630651, "uuid": "59e7b8f0-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wbanking.coop15abril.fin.ec/15onLine/inicio.jsf", "Tag": [ { "name": "magecart", "colour": "#9a90e5", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630651, "uuid": "5a003a2a-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winstonchurchill.rf.gd/MSI_142506.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630660, "uuid": "5f2ea174-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/craftpedro62-debug/_s/raw/refs/heads/master/sass/utilities/conhost.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775630830, "uuid": "c4ac7f9d-3316-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://run-log.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631188, "uuid": "9a1efb09-3317-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://task-api.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631551, "uuid": "7279eacb-3318-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-hub.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631621, "uuid": "9c102078-3318-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.24.199:35060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631680, "uuid": "bf4277fb-3318-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.108.38.224:56084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631849, "uuid": "23c58c9b-3319-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-svc.naminkaprocess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631920, "uuid": "4e60f7b3-3319-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.167.27:60366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631920, "uuid": "4e6fecbf-3319-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.126:48943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775631921, "uuid": "4e9f9952-3319-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.16.120:47363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632327, "uuid": "40b1419d-331a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.124:34192/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632329, "uuid": "41e74272-331a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.235.86:41497/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632515, "uuid": "b0f59e02-331a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://force-point.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632694, "uuid": "1b7cd7e0-331b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-api.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632870, "uuid": "849e6543-331b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-svc.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632929, "uuid": "a76e83de-331b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.95.117:49543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775632989, "uuid": "cb32483a-331b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.236:54669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633168, "uuid": "35f51daf-331c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive-node.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633235, "uuid": "5e43c953-331c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.24.199:35060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633467, "uuid": "e8265deb-331c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.108.38.224:56084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633526, "uuid": "0bc3b1c9-331d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kinetic-io.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633827, "uuid": "bf08b916-331d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.7.211:43286/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633827, "uuid": "bf21fcb3-331d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.21.145:40870/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775633886, "uuid": "e2086b2f-331d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-log.dynamismjuply.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634125, "uuid": "70b7405e-331e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.124:34192/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634140, "uuid": "79c09620-331e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.99.7:55536/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634250, "uuid": "baf6a8ad-331e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scan-gate.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634315, "uuid": "e1cd2b70-331e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.236:54669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634426, "uuid": "243a144f-331f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.99.7:55536/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634428, "uuid": "2529e3f0-331f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.32.15:46311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634493, "uuid": "4bab99c6-331f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://read-api.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634569, "uuid": "78f83d19-331f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.95.117:49543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634726, "uuid": "d6f3aad2-331f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.21.145:40870/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634743, "uuid": "e0a506a9-331f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.193.8:55633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634912, "uuid": "4593e2a1-3320-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-hub.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775634919, "uuid": "49ba8e7d-3320-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.112.124:60978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635210, "uuid": "f73ffe19-3320-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-node.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635326, "uuid": "3c4afb4b-3321-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.36.223:54421/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635332, "uuid": "401e8157-3321-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.158:52941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635448, "uuid": "851cd08d-3321-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.7.211:43286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635566, "uuid": "cb205680-3321-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8756257131/zCfWbdD.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635567, "uuid": "cc15a3b6-3321-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-svc.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635701, "uuid": "1bfe3763-3322-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.193.8:55633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775635868, "uuid": "7f502618-3322-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-log.boredistascan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775636178, "uuid": "38541ce3-3323-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.182.151:34349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775636233, "uuid": "58dcbaf1-3323-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lab-check.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775636529, "uuid": "095c6d08-3324-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://test-api.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775636598, "uuid": "32744de8-3324-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.158:52941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775636887, "uuid": "df14749b-3324-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://study-node.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637246, "uuid": "b4a3b2bd-3325-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fact-vault.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637485, "uuid": "43604f44-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8756257131/zCfWbdD.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637550, "uuid": "69e14abe-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-io.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637613, "uuid": "8fb8f356-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_arm6", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "b57d6fdc-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_arm7", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "b57f9a7d-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_mpsl", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "b57fa582-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_arm", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "b57fc3e5-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_arm5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "b5889a98-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_ppc", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637677, "uuid": "b5928502-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_m68k", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637733, "uuid": "d6d7d87d-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_sh4", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637733, "uuid": "d6d7e2d9-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_mips", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637788, "uuid": "f78edaf5-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637788, "uuid": "f7ff7d9d-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.32.15:46311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "fa604c7c-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "fa6056de-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637792, "uuid": "fa627f24-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fdbb490b-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_x86", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fdbf6b29-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fdbf6bc4-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fdc2b25d-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/main_x86_64", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fdc84e88-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fde4b6cc-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/run.sh", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637798, "uuid": "fdece20a-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637799, "uuid": "fe4d7789-3326-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637852, "uuid": "1dc8e379-3327-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-svc.sciencestupids.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "1fb2e5e2-3327-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "1fb9c0b7-3327-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "1fb9d804-3327-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637855, "uuid": "1fc6bc81-3327-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775637978, "uuid": "692c2df7-3327-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/mipsel", "Tag": [ { "name": "176-65-139-67", "colour": "#7823ad", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638270, "uuid": "16f173e6-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://farm-logic.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1acc03ce-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad30550-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad3426c-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad34a75-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad3588f-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad38561-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad5ced2-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1ad5d282-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638276, "uuid": "1adbcb3c-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638387, "uuid": "5cc53b23-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/n", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638507, "uuid": "a44a9066-3328-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crop-api.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638867, "uuid": "7ab4dfba-3329-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://field-node.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775638927, "uuid": "9ebdd4c5-3329-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.32.163:42919/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639170, "uuid": "2fd6e2ed-332a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.15.119.98:43267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639287, "uuid": "7557cc5b-332a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-vault.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639527, "uuid": "0417bf5b-332b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.86.0:43366/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639531, "uuid": "0696142e-332b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ranch-hub.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639537, "uuid": "0a2f01ce-332b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/c.sh", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639654, "uuid": "5044b9df-332b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/massload", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775639887, "uuid": "daad3c19-332b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-svc.ranchitro.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775640251, "uuid": "b41edda1-332c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://word-check.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775640321, "uuid": "dd926382-332c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.139.33.199:58565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775640428, "uuid": "1d281a9c-332d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.255:36524/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775640609, "uuid": "89535611-332d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://text-api.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775640908, "uuid": "3b72bcbe-332e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-node.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641271, "uuid": "13c45246-332f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mood-log.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641334, "uuid": "39ad999e-332f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.51.87:38148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641573, "uuid": "c82500c7-332f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hard-svc.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641582, "uuid": "ccfc9e01-332f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.53.98.121:50518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641626, "uuid": "e72e94a7-332f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7900572318/KaAa3H0.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641632, "uuid": "eadf9d8b-332f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.51.87:38148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775641932, "uuid": "9dd7d007-3330-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://line-vault.dictatessullen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642226, "uuid": "4ce84879-3331-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.255:36524/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642234, "uuid": "51a4d6a5-3331-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-static.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642588, "uuid": "24fae4a1-3332-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-point.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642603, "uuid": "2e0d5794-3332-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.189.59:41488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642604, "uuid": "2e3429f5-3332-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.165.25:55762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642726, "uuid": "7751b5c2-3332-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.131.243:53574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775642952, "uuid": "fdf60fbf-3332-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-api.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643252, "uuid": "b0be7803-3333-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-node.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643427, "uuid": "18c1cf80-3334-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.32.163:42919/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643427, "uuid": "191dd6f3-3334-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.166.191.8:57062/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643674, "uuid": "abf19ea5-3334-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-io.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643687, "uuid": "b403820f-3334-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.117.136:38308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643741, "uuid": "d405a5d6-3334-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.53.98.121:50518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643975, "uuid": "5f51751f-3335-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.81.192:41615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775643975, "uuid": "5fb19b80-3335-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-svc.fastidmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644207, "uuid": "ea038af3-3335-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7942715918/RBZABPF.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644220, "uuid": "f1d10ad6-3335-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:35874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644222, "uuid": "f2f8b471-3335-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.189.59:41488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644331, "uuid": "340c51d7-3336-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coat-check.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644400, "uuid": "5d2ca7dc-3336-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.131.243:53574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644636, "uuid": "e944ec03-3336-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wear-api.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775644993, "uuid": "be1374a4-3337-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop-hub.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775645294, "uuid": "71995664-3338-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stock-node.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775645653, "uuid": "477ff576-3339-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://item-svc.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775645953, "uuid": "fa6363c3-3339-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://style-log.selzovestments.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646128, "uuid": "6295b847-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.45.199:50943/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646192, "uuid": "8945e99c-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.117.136:38308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646246, "uuid": "a9496df5-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-object.ontologicalflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646246, "uuid": "a9561049-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://infer-unit.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646246, "uuid": "a96d809b-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive-hub.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646246, "uuid": "a97d8985-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-vault.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646247, "uuid": "a98196cc-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-set.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646247, "uuid": "a9a26d51-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stat-portal.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646247, "uuid": "a9bf24c1-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-time.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646248, "uuid": "aa1f6602-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://perception-svc.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646248, "uuid": "aa2218e5-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-route.fariseietogo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646248, "uuid": "aa7be790-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-step.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646248, "uuid": "aa91b187-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blast-zone.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646248, "uuid": "aa9ef669-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame-api.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "aab32fa4-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-audit.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "aab342d6-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lead-trace.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "aab709ae-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://debate-log.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "aab89645-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://iridiacheats.dev/install", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "aaef07d1-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iridiacheats.dev/gggs.7z", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "aaef0ba5-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://low-io.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646249, "uuid": "ab3adf83-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://micro-svc.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646250, "uuid": "abdf7378-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-logic.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646251, "uuid": "ac52b736-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-node.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646252, "uuid": "acb0bcbe-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://water-log.midgetplunge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646252, "uuid": "acbc92ed-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hero-svc.boyishglorified.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646252, "uuid": "ace4defe-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fall-check.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad1f1657-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ideal-node.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad4ecfcc-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-wise.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad54d8e9-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://word-map.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad54dc69-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://waste-node.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad61a323-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-data.cognisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad66c471-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-point.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad68a9e8-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://surface-api.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad6ab005-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-check.theoristack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad75e203-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-sync.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad77868d-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://floor-node.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad7ebed8-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trend-api.downpredict.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad88fd19-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-logic.axiomatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad8b93b7-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iridiacheats.dev/fal.php", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ad92df5e-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mega-vault.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646253, "uuid": "ada0c79b-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://line-secure.systemologyhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646254, "uuid": "adfcf076-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://outer-reach.exaltedinfinate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646254, "uuid": "ae02447c-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lab-access.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646255, "uuid": "ae6e9c10-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://motion-svc.dialecticalgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646255, "uuid": "aec6a2b2-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-split.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646256, "uuid": "aee5e807-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ravoqqux.top/admin/signup-worker.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646256, "uuid": "af2d2d89-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hsgeowvi.com/032.txt", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646256, "uuid": "af638bc9-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hint-api.inferencestream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646308, "uuid": "ce4dd1c8-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bread-wine.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646310, "uuid": "cf187cdf-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://match-hub.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d0debc33-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-route.leavedistribut.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d0f58aa0-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://count-log.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d1104103-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-weight.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d1341d0f-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trimeshet.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d15789b5-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stat-render.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d1653769-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://break-down.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d1696113-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dock-svc.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646313, "uuid": "d16d3e03-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://truck-line.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646314, "uuid": "d173efe0-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://round-svc.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646314, "uuid": "d179ca8e-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cargo-hub.basaltloading.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646314, "uuid": "d19a82b0-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://game-api.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646314, "uuid": "d1a22cc9-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://score-board.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646314, "uuid": "d1cc949f-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-scan.analyticaengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646314, "uuid": "d1fa2a27-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-api.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646315, "uuid": "d23c5249-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rest-log.goingsick.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646316, "uuid": "d3377962-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-team.saklatwenty.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [ { "name": "verification-google", "colour": "#45df8f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646370, "uuid": "f3266dc3-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvind-point.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646370, "uuid": "f32a9b35-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ktnceg.intellectnail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646370, "uuid": "f3370606-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cleaaudit.embassyotolaryn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646370, "uuid": "f3450f72-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-fluxex.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646370, "uuid": "f34e97b9-333a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-tru5.armeniansgrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775646560, "uuid": "64362841-333b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:35874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647327, "uuid": "2d8635f3-333d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.45.199:50943/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775647347, "uuid": "393a1e57-333d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.43.101:36878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775648119, "uuid": "05825420-333f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.189.66:39201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775648228, "uuid": "467d640d-333f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.47.176:49969/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775648368, "uuid": "99c8a4ce-333f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.72:42291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775648542, "uuid": "01a75734-3340-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.81.192:41615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775648827, "uuid": "abd0255d-3340-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.82.113:38476/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775649442, "uuid": "19e6fe7e-3342-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.191.53:52275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775649442, "uuid": "1a620ff2-3342-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.237.251:34948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775650342, "uuid": "32bac732-3344-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.189.66:39201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775650456, "uuid": "768661ed-3344-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.72:42291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775651126, "uuid": "05e1bcb7-3346-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.237.251:34948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775651720, "uuid": "67f517aa-3347-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.85:40051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775653215, "uuid": "e31f0f63-334a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.171:39070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775653327, "uuid": "25839f46-334b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.82.61:51804/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775653927, "uuid": "8b4d8880-334c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.3:40689/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775653937, "uuid": "91461907-334c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.92.120:38077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775654241, "uuid": "46b52898-334d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.0.149:38376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775654409, "uuid": "aafd02fe-334d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.0.149:38376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775654651, "uuid": "3b0dedd3-334e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.22.235.64:52647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775654838, "uuid": "aa891a59-334e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.171:39070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775654888, "uuid": "c7fe701b-334e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixel-trace.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655128, "uuid": "5717aff1-334f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.127.139.236:51817/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655199, "uuid": "81bec662-334f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.64.12:41955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655375, "uuid": "ea864a5e-334f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.92.120:38077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655426, "uuid": "08e0268c-3350-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.127.139.236:51817/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655489, "uuid": "2e813e64-3350-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://image-api.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655620, "uuid": "7ca71072-3350-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.80.25:59854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655666, "uuid": "97b81ecd-3350-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-hub.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655670, "uuid": "9a12bcb7-3350-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.86.36:52242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655912, "uuid": "2a5df4a6-3351-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://draw-node.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775655966, "uuid": "4a8bd82b-3351-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.165:44071/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775656012, "uuid": "666805ad-3351-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.22.235.64:52647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775656271, "uuid": "00c7bac6-3352-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://art-svc.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775656445, "uuid": "680e7104-3352-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7655527200/UUUMyLr.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775656450, "uuid": "6afaf8a7-3352-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.165.25:55762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775656567, "uuid": "b143647f-3352-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sign-gate.iconoguroque.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775656928, "uuid": "881c137a-3353-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://form-check.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775657001, "uuid": "b375f77d-3353-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.80.25:59854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775657001, "uuid": "b37bfcdd-3353-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.64.12:41955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775657053, "uuid": "d2c10f4e-3353-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.164.160:46338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775657468, "uuid": "ca2c9cbd-3354-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-point.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775657710, "uuid": "5a91e0b0-3355-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-api.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775657888, "uuid": "c43035c6-3355-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-node.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775658127, "uuid": "52f17d34-3356-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.165:44071/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775658188, "uuid": "77166ecd-3356-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-svc.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775658427, "uuid": "0563ac21-3357-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.226.59:49082/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775658552, "uuid": "506a4750-3357-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame-hub.shapeprimrose.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775658728, "uuid": "b8caa80b-3357-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.11.64.11:49875/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775658909, "uuid": "24b1b0ea-3358-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talk-sync.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775659270, "uuid": "fc12fa0d-3358-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://word-api.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775659327, "uuid": "1e3dbce3-3359-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.158.152:60615/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775659567, "uuid": "ad3689b8-3359-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-log.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775659580, "uuid": "b4acbc5a-3359-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.59.106:39556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775659869, "uuid": "6150a11f-335a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quiet-node.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775659927, "uuid": "83a9fb70-335a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.226.59:49082/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660053, "uuid": "cf1be0ad-335a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.209.194:48095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660166, "uuid": "126a4a9a-335b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prennixo.com/react", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660168, "uuid": "1335a027-335b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prennixo.com//pnpm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660288, "uuid": "5a9e3e0b-335b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://speech-svc.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660652, "uuid": "33c05460-335c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rest-gate.dialectdozing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660778, "uuid": "7f34856f-335c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.8.232:41777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775660949, "uuid": "e4e55cb2-335c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wrap-logic.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661250, "uuid": "98049a34-335d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://time-check.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661428, "uuid": "022595d4-335e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.241:54139/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661429, "uuid": "033ff3fe-335e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://google-services.cc/base.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661609, "uuid": "6e061450-335e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slot-api.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775661910, "uuid": "218e2515-335f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-node.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662028, "uuid": "68412bbd-335f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.209.194:48095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662266, "uuid": "f5f7c4bb-335f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coat-svc.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662326, "uuid": "19a917db-3360-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.241:54139/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662386, "uuid": "3d24dd05-3360-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iridiacheats.dev/install", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-ps1", "colour": "#65620e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662567, "uuid": "a9023f45-3360-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://port-hub.covercotehour.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662626, "uuid": "cc771c05-3360-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vagner.site/MSI_095306.png", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662629, "uuid": "ce58efeb-3360-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://magina.online/MSI_091731.png", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775662631, "uuid": "cf718659-3360-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ftpemails.com/MSI_145003.png", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663232, "uuid": "35beb998-3362-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://send-relay.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663473, "uuid": "c57fa9a6-3362-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-api.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663603, "uuid": "12b919cb-3363-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.165.125.212:41472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663714, "uuid": "55252f01-3363-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://truth-node.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775663827, "uuid": "980072c0-3363-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.218.123:38316/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775664073, "uuid": "2ad3de6f-3364-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-svc.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775664090, "uuid": "34ccbad6-3364-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.29.36:33225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775664434, "uuid": "01f3272d-3365-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-gate.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775664792, "uuid": "d7540130-3365-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://message-hub.emissarysooth.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665155, "uuid": "b0155a97-3366-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://king-logic.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665395, "uuid": "3ec513ef-3367-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://past-api.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665763, "uuid": "1a876f93-3368-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.29.36:33225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665814, "uuid": "38bb7e68-3368-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-check.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775665926, "uuid": "7b96119e-3368-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.218.123:38316/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775666109, "uuid": "e89879fb-3368-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crown-node.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775666467, "uuid": "bd977160-3369-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hist-svc.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775666768, "uuid": "7184f16b-336a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-vault.monarchold.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775667067, "uuid": "23c4d539-336b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-pair.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775667492, "uuid": "210514c4-336c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dual-api.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775667630, "uuid": "733b1eab-336c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.113:59799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775667729, "uuid": "ae0e7f81-336c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-node.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775667983, "uuid": "456080d3-336d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.113:59799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668152, "uuid": "aa780c38-336d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://item-svc.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668395, "uuid": "3b2f502e-336e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.116.177.76:59843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668514, "uuid": "8234c706-336e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://match-gate.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668628, "uuid": "c603a990-336e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.225.246:35523/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668631, "uuid": "c780441c-336e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.145.160:39046/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668704, "uuid": "f2fbff58-336e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.151:49191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775668882, "uuid": "5d5bab66-336f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.155.180:43622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669054, "uuid": "c3cd4a4c-336f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-hub.goodtwain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669229, "uuid": "2bf25bd0-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-logic.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669238, "uuid": "319b1677-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.116.177.76:59843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669297, "uuid": "54dbc9e9-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.123.44.210:40109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669347, "uuid": "72506aad-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.80/TaskSvc.vbs", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669347, "uuid": "728a9005-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.80/procesos.vbs", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669347, "uuid": "72a1c38c-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.80/Task.vbs", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669347, "uuid": "72a8b196-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.80/SysTask.vbs", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669530, "uuid": "df8084af-3370-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://take-api.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669590, "uuid": "0319530b-3371-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.122:46533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669714, "uuid": "4d7f616f-3371-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.31.158:38637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669767, "uuid": "6cd3a6c5-3371-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-node.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775669948, "uuid": "d8bc1c5f-3371-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.151:49191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670129, "uuid": "44c4873b-3372-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.204.183:45670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670130, "uuid": "457579a2-3372-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-svc.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670426, "uuid": "f5b41cbc-3372-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.149/31agosto.vbs", "Tag": [ { "name": "178-16-54-149", "colour": "#845029", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670427, "uuid": "f60b2a0f-3372-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.149/33333.vbs", "Tag": [ { "name": "178-16-54-149", "colour": "#845029", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670427, "uuid": "f6233f8a-3372-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.225.246:35523/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670428, "uuid": "f6c69922-3372-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.23/chromedriver.exe", "Tag": [ { "name": "178-16-55-23", "colour": "#960ebf", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670487, "uuid": "1a2f6f72-3373-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-gate.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670672, "uuid": "887b1886-3373-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.204.183:45670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775670788, "uuid": "cd8a209d-3373-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-hub.apotheosbring.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671211, "uuid": "c9a17c4e-3374-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://win-point.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671509, "uuid": "7b43ed0b-3375-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-api.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671807, "uuid": "2ccb9576-3376-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.158/Ficiyolov", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671810, "uuid": "2ea834b2-3376-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.158/WORK200", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775671867, "uuid": "50b37525-3376-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-node.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672062, "uuid": "c4df06f8-3376-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.147:40089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672110, "uuid": "e151d9b0-3376-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://test-svc.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672471, "uuid": "b87a7a93-3377-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.186.172:49888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672527, "uuid": "d9f8bc8c-3377-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark-gate.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672719, "uuid": "4c3c9785-3378-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.73.23:44449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672828, "uuid": "8d2bd137-3378-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.189.140:54296/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775672828, "uuid": "8d497a7c-3378-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-hub.excellsadarma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775673016, "uuid": "fd4827d9-3378-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.87.7:44145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775673194, "uuid": "677bfea0-3379-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://myth-logic.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775673489, "uuid": "170152dd-337a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dream-api.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775673846, "uuid": "ec5d9996-337a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fair-node.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674027, "uuid": "57be061b-337b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.77.227:46777/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674209, "uuid": "c4462b1a-337b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tale-svc.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674333, "uuid": "0e1a6926-337c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.8:51962/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674510, "uuid": "77dbf7e1-337c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://story-gate.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674698, "uuid": "e8356172-337c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.163.34.244:64487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674822, "uuid": "31e864e9-337d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.241.15:40030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674874, "uuid": "50d19099-337d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://magic-hub.assyrfantasy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775674999, "uuid": "9b081583-337d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.144.30:40331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775675227, "uuid": "23335aa0-337e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-sync.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775675529, "uuid": "d749db11-337e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-io.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775675646, "uuid": "1d23ecf1-337f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:41932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775675777, "uuid": "6ad78c38-337f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.232.37:33853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775675890, "uuid": "ae4badcd-337f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-api.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775676191, "uuid": "618566c0-3380-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-vault.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775676426, "uuid": "edd5a35e-3380-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.8:51962/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775676439, "uuid": "f58b172a-3380-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.144.30:40331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775676443, "uuid": "f815b0d7-3380-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.135.172:39688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775676548, "uuid": "36548909-3381-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-node.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775676849, "uuid": "ea37909b-3381-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shell-svc.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677162, "uuid": "a4596d0d-3382-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:41932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677210, "uuid": "c0e5a777-3382-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-point.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677328, "uuid": "075ea372-3383-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.38.139:40675/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677510, "uuid": "7445001a-3383-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-api.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677626, "uuid": "b95566fd-3383-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.38.139:40675/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677641, "uuid": "c1d79b2c-3383-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.255.87:37402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677866, "uuid": "48556e8c-3384-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-hub.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775677938, "uuid": "7342a1d3-3384-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.71.155:39266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775678167, "uuid": "fbc45563-3384-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://know-node.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775678528, "uuid": "d30ca08e-3385-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-svc.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775678834, "uuid": "89117566-3386-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.201.48:40944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775678891, "uuid": "ab4cfbec-3386-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-gate.gnosticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679188, "uuid": "5c6e0e61-3387-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-data.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679197, "uuid": "61a0e594-3387-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.11.175.246:43403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679315, "uuid": "a79872fc-3387-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.3.168:53888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679369, "uuid": "c7cc9774-3387-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.1:43951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679612, "uuid": "58f35516-3388-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-api.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679846, "uuid": "e4a2cd45-3388-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8550280707/ZChUqwg.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679855, "uuid": "e9c15ab9-3388-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-vault.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679967, "uuid": "2c707c08-3389-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.201.48:40944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679967, "uuid": "2c9b3686-3389-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.25.132:42309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775679968, "uuid": "2ccea23b-3389-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.56.88.23:41926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775680266, "uuid": "dee7a860-3389-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://truth-node.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775680569, "uuid": "931eb22a-338a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-svc.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775680867, "uuid": "44e3b0e7-338b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drift-gate.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775680926, "uuid": "684f0507-338b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.47:40680/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775681228, "uuid": "1bfa28d7-338c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-core.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775681230, "uuid": "1d0edd3d-338c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.213.99:42905/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775681357, "uuid": "69421d1b-338c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.205:45589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775681588, "uuid": "f2f55933-338c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-api.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775681827, "uuid": "8110f043-338d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.67:43514/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775681827, "uuid": "8138189c-338d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.213.99:42905/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682133, "uuid": "37517a4c-338e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.88.242.17:42778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682187, "uuid": "579792aa-338e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-log.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682312, "uuid": "a25cef08-338e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.106.19:49550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682368, "uuid": "c365e61c-338e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://entity-node.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682399, "uuid": "d5c97656-338e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.218:50669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682608, "uuid": "52ae29e7-338f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://verse-svc.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682728, "uuid": "9a63c138-338f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.35.67:34774/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775682909, "uuid": "06332e16-3390-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-gate.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683027, "uuid": "4c1f5f40-3390-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.15.172:40133/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683027, "uuid": "4c7232da-3390-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.35.67:34774/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683221, "uuid": "c03bda36-3390-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.255.10.22:55776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683268, "uuid": "dc4e3071-3390-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://engine-io.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683567, "uuid": "8e22737d-3391-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://law-check.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683627, "uuid": "b1e43f26-3391-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.15.172:40133/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683699, "uuid": "dd14528b-3391-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.1:43951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683930, "uuid": "66c13b79-3392-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixed-node.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775683931, "uuid": "6734c537-3392-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.106.19:49550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684059, "uuid": "b36336e0-3392-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mhatuminerals.africa/wp-admin/js/scc.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684287, "uuid": "3b60ce7f-3393-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-vault.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684527, "uuid": "ca2c0690-3393-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.12.58:35723/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684538, "uuid": "d13000be-3393-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.218:50669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684539, "uuid": "d1a76b46-3393-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.49:54386/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684649, "uuid": "132736c5-3394-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-svc.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684828, "uuid": "7da31896-3394-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.243.47:34666/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684893, "uuid": "a4d14f23-3394-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-hub.axiomorphengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775684894, "uuid": "a51ef840-3394-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.255.10.22:55776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685316, "uuid": "a0b8b580-3395-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sphere-api.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685426, "uuid": "e25232d1-3395-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.243.47:34666/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685613, "uuid": "51ef8ca4-3396-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talk-node.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685697, "uuid": "83c059e0-3396-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.234.195:52519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685729, "uuid": "96d377d3-3396-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.49:54386/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685805, "uuid": "c4049124-3396-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.211.109:39020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775685974, "uuid": "28d6fc4c-3397-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thesis-log.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775686271, "uuid": "da269da7-3397-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://state-svc.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775686327, "uuid": "fb6cf2a2-3397-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.147.46:46267/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775686694, "uuid": "d5f7dc3a-3398-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://debate-hub.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775686933, "uuid": "64a094f5-3399-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-gate.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775687060, "uuid": "b00980ca-3399-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.234.195:52519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775687236, "uuid": "18ee1c20-339a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.18.126:57231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775687293, "uuid": "3af07b75-339a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://infer-unit.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775687648, "uuid": "0e968056-339b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-api.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775687898, "uuid": "a38e6db7-339b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.12.243:36096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775687953, "uuid": "c4a979c1-339b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-log.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775688314, "uuid": "9beb4a96-339c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-node.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775688669, "uuid": "6f3f3709-339d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-svc.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689031, "uuid": "471a828a-339e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-gate.inferentialisflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689329, "uuid": "f8610148-339e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer-io.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689635, "uuid": "af34e070-339f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.18.82:53379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689694, "uuid": "d1fd0a61-339f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-api.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689928, "uuid": "5d8ab6bd-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.219.217:37783/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775689992, "uuid": "83dede1d-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abstract-log.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac4348e8-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac44d597-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac4994ac-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac4b569d-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac52bd41-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac56839a-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac584a03-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac5c7934-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac5f18be-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690060, "uuid": "ac620dcd-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690123, "uuid": "d1baf343-33a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.145.225.160/AB4g5/Josho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690227, "uuid": "10039344-33a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.101.5:36891/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690347, "uuid": "575ce1aa-33a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-node.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690648, "uuid": "0a9fd60d-33a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-svc.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690781, "uuid": "59dd81dd-33a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.121.37:34795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775690827, "uuid": "75971309-33a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.101.5:36891/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691009, "uuid": "e2320c45-33a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-gate.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691021, "uuid": "e8f72a63-33a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.18.82:53379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691130, "uuid": "2a36d261-33a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.219.217:37783/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691368, "uuid": "b83b0da4-33a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-flow.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691689, "uuid": "772b7e30-33a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.238.186:52416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691917, "uuid": "ff0ab13f-33a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-api.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775691977, "uuid": "2308a3a8-33a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.121.37:34795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692148, "uuid": "88a7e24b-33a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rank-node.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692580, "uuid": "8a2726fc-33a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.155.180:43622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692627, "uuid": "a67f35a9-33a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.236.13:52644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692629, "uuid": "a75c24d9-33a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stream-svc.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692688, "uuid": "ca88d9ff-33a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.3:40689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692756, "uuid": "f3727fd9-33a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.51.149:50787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692760, "uuid": "f5aa1cc9-33a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.183:43345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607425, "uuid": "460e7bcd-32e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.10.209.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775664065, "uuid": "266a9af0-3364-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.29.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775626025, "uuid": "94bd5ecb-330b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.111.196", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775634425, "uuid": "2317b235-331f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.32.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775631666, "uuid": "b71fd612-3318-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.108.38.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607726, "uuid": "f9b56c8c-32e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.25.33", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624225, "uuid": "6399e1fb-3307-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.26.130", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775669285, "uuid": "4d4f1f1f-3370-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.123.44.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775682364, "uuid": "c1710a45-338e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.114.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611625, "uuid": "0d7ace0a-32ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.60.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620025, "uuid": "9c5b1b7f-32fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.198.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "567346b7-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.56.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775634124, "uuid": "70098653-331e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.99.7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608745, "uuid": "58c85437-32e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.130.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775627765, "uuid": "a1a5d914-330f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.103.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623386, "uuid": "6f506e17-3305-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.94.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775609165, "uuid": "530e2d66-32e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.211.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614626, "uuid": "09f5953a-32f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.88.187", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611385, "uuid": "7e5ec48b-32e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.38.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663824, "uuid": "96850cf8-3363-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.218.123", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775657045, "uuid": "cdd9d9f4-3353-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.164.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775649425, "uuid": "1052043b-3342-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.237.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668685, "uuid": "e7ba8ed0-336e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.239.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692744, "uuid": "ec49e013-33a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.232.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775677625, "uuid": "b878174e-3383-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.255.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608625, "uuid": "116f6bc0-32e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.170.166", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775648345, "uuid": "8c53a265-333f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.116.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775687885, "uuid": "9bf57f74-339b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.12.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775626206, "uuid": "0058973b-330c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.204.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607544, "uuid": "8d4ab0b4-32e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.43.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621765, "uuid": "a9798b72-3301-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.42.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684525, "uuid": "c9331637-3393-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.20.49", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672045, "uuid": "bad4fd85-3376-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.56.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "5672da65-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.24.141.207", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684525, "uuid": "c932dcf0-3393-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.12.58", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692624, "uuid": "a488c7cb-33a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.236.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775674985, "uuid": "92eae1bd-337d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.193.144.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "5673809f-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.70.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679964, "uuid": "2a6faaf5-3389-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.25.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775681824, "uuid": "7f8103b1-338d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.132.67", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643666, "uuid": "a753d3cb-3334-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.117.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672465, "uuid": "b4cc1025-3377-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.186.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775660044, "uuid": "c992daea-335a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.133.209.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775659565, "uuid": "abc3711e-3359-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.134.59.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668626, "uuid": "c4bc6a5f-336e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.145.160", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775674325, "uuid": "0956a405-337c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.125.8", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668865, "uuid": "5315a412-336f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.155.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775633825, "uuid": "bda97cc5-331d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.21.145", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643967, "uuid": "5a8f330b-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.81.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622907, "uuid": "5226af32-3304-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.2.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613606, "uuid": "aa776dd8-32ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.130.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775690765, "uuid": "50a90b58-33a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.121.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608507, "uuid": "cab98dfd-32e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.45.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639524, "uuid": "02c3b0cd-332b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.86.0", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "56726433-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.178.109.75", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622125, "uuid": "7fe9f982-3302-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.39.113", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671806, "uuid": "2c65b5b8-3376-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.158", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775655125, "uuid": "55aa1e79-334f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.127.139.236", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "5673b299-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.247.67", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684824, "uuid": "7bbfcb40-3394-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.243.47", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775678825, "uuid": "838223e6-3386-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.201.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "5672e2e1-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.205.127", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775654585, "uuid": "135a75df-334e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.22.235.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670425, "uuid": "f4f0e8b7-3372-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.54.149", "Tag": [ { "name": "178-16-54-149", "colour": "#845029", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670425, "uuid": "f4f0b3f8-3372-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.55.23", "Tag": [ { "name": "178-16-55-23", "colour": "#960ebf", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775669346, "uuid": "71b65507-3370-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.55.80", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621345, "uuid": "af21603f-3300-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.243.177.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775625425, "uuid": "2efd30c5-330a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.60.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622365, "uuid": "0ed664b0-3303-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.193.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775685665, "uuid": "70e8ce00-3396-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.234.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775686325, "uuid": "f9f7ebd9-3397-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.147.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775658424, "uuid": "03dd7db8-3357-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.226.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679306, "uuid": "a2a3a8b9-3387-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.3.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775632926, "uuid": "a5ae8bda-331b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.95.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775617445, "uuid": "9a3293c9-32f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.108.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775655606, "uuid": "73ef2f94-3350-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.80.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641565, "uuid": "c2e30c86-332f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.53.98.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612525, "uuid": "25e4075b-32ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.155.8.56", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Ngioweb", "colour": "#d529da", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775627107, "uuid": "1947361c-330e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.18.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641325, "uuid": "33e11506-332f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.51.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775631607, "uuid": "93cdd979-3318-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.24.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775648106, "uuid": "fdbefb03-333e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.189.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775648825, "uuid": "aa7393e0-3340-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.82.113", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661425, "uuid": "00a0e205-335e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.102.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608865, "uuid": "a07c3645-32e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.180.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775642706, "uuid": "6b5ad67d-3332-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.131.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775628425, "uuid": "2b34dbcf-3311-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.73.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679184, "uuid": "59f09bfa-3387-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.11.175.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639166, "uuid": "2cf1feb3-332a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.15.119.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668626, "uuid": "c4bc78ae-336e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.225.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775680924, "uuid": "66e639c8-338b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.123.47", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775648225, "uuid": "44cac7bf-333f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.47.176", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "5671d412-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.69.90", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775633825, "uuid": "bda99430-331d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.7.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775627824, "uuid": "c5185545-330f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.144.156", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775640426, "uuid": "1c0d50e2-332d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.149.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775636164, "uuid": "3025332b-3323-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.182.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775690224, "uuid": "0e3bf84e-33a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.101.5", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775642584, "uuid": "22912bd4-3332-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.165.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689626, "uuid": "a9ae9970-339f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.18.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775677325, "uuid": "058d195f-3383-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.38.139", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775632326, "uuid": "3fff0d9f-331a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.235.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670126, "uuid": "428bbffe-3372-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.204.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775675764, "uuid": "635def3c-337f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.232.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775609106, "uuid": "302cb74f-32e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.103.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775635325, "uuid": "3b7ef46d-3321-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.169.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624225, "uuid": "6399d030-3307-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.252.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775654225, "uuid": "3cd8cdac-334d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.0.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775642584, "uuid": "229120d4-3332-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.189.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614324, "uuid": "5672ca4d-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.215.35", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775691664, "uuid": "6879722a-33a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.238.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692744, "uuid": "ec48b4ff-33a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.51.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775690045, "uuid": "a388d8b4-33a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.145.225.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668385, "uuid": "353f4563-336e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.116.177.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775631906, "uuid": "462ba4cf-3319-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.16.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775681225, "uuid": "1a92a681-338c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.213.99", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775618825, "uuid": "d0ee608c-32fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.252.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775653207, "uuid": "de173a9c-334a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775619605, "uuid": "a1d23f10-32fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.162.206.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775667607, "uuid": "6556e4a1-336c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.85.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679964, "uuid": "2a6fc20f-3389-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.56.88.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623985, "uuid": "d4737f06-3306-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.106.225.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630645, "uuid": "560d3ecf-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.90.19", "Tag": [ { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620744, "uuid": "48d07f14-32ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "abstract-io.theoriconhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689990, "uuid": "82844bde-33a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "abstract-log.theorexuslayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622669, "uuid": "c46132ff-3303-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "archive-hub.systemicitylayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775656265, "uuid": "fcc15c08-3351-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "art-svc.iconoguroque.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608085, "uuid": "cf65f0d0-32e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-audit.gnoseologiccore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775678888, "uuid": "a9813332-3386-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-gate.gnosticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614925, "uuid": "bc9db647-32f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-logic.axiomaticsphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775642584, "uuid": "229f4e60-3332-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-point.fastidmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775626025, "uuid": "94c9383b-330b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-point.ministobelisk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775657465, "uuid": "c85e22d0-3354-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-point.shapeprimrose.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775666766, "uuid": "6fff0a87-336a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-vault.monarchold.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612585, "uuid": "498212f3-32ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "being-log.ontofluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671865, "uuid": "4f318798-3376-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-node.excellsadarma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775667065, "uuid": "2255a1cc-336b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-pair.goodtwain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775625666, "uuid": "bec24c3f-330a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-log.cognitrixvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775610184, "uuid": "b2ae4f23-32e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell-logic.epistematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775664429, "uuid": "ff5863aa-3364-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-gate.emissarysooth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644328, "uuid": "3228392a-3336-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coat-check.selzovestments.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775662264, "uuid": "f4d73209-335f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coat-svc.covercotehour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775628845, "uuid": "25729717-3312-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-api.pairingreptile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775642950, "uuid": "fc75eeb6-3332-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-api.fastidmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670485, "uuid": "187c9152-3373-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-gate.apotheosbring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608867, "uuid": "a1c65aff-32e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-secure.gnoseologiccore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775676188, "uuid": "602708e1-3380-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-vault.noospherecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638505, "uuid": "a320a1da-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crop-api.ranchitro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775666106, "uuid": "e6ec66f2-3368-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crown-node.monarchold.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775640906, "uuid": "3a350efa-332e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-node.dictatessullen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671506, "uuid": "7957da0b-3375-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-api.excellsadarma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775618587, "uuid": "431619d2-32fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-mesh.inferenciumgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775688611, "uuid": "4ce69529-339d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-svc.inferentialisflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637845, "uuid": "19985759-3327-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-svc.sciencestupids.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611206, "uuid": "13aa7845-32e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-vault.epistematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775616964, "uuid": "7bfc1aa3-32f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "debate-hub.dialectonforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775686692, "uuid": "d4ad7b36-3398-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "debate-hub.dialectosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775655909, "uuid": "28c2d983-3351-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "draw-node.iconoguroque.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775673484, "uuid": "1475985b-337a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dream-api.assyrfantasy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775680864, "uuid": "4333e0d0-338b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drift-gate.epistemiconflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613245, "uuid": "d3121f6a-32ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drift-svc.ontofluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775633165, "uuid": "343b525e-331c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drive-node.dynamismjuply.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775667491, "uuid": "200fec67-336c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dual-api.goodtwain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775629087, "uuid": "b57012da-3312-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "egg-vault.pairingreptile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775683265, "uuid": "da0ed342-3390-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "engine-io.axiomorphengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613545, "uuid": "85da7de1-32ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "entity-hub.ontofluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775682364, "uuid": "c17c2503-338e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "entity-node.ontoversegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637244, "uuid": "b391f2a3-3325-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fact-vault.sciencestupids.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775673844, "uuid": "eb20f6aa-337a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fair-node.assyrfantasy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638265, "uuid": "143f2eb7-3328-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "farm-logic.ranchitro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775633884, "uuid": "e0f20e81-331d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-log.dynamismjuply.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775638864, "uuid": "797a604d-3329-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "field-node.ranchitro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775635145, "uuid": "d0a45c3b-3320-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-node.boredistascan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622312, "uuid": "ef92810a-3302-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-stack.systemicitylayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775683927, "uuid": "650267bd-3392-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fixed-node.axiomorphengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614626, "uuid": "0a02d076-32f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fixed-point.axiomaticsphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679184, "uuid": "5a07c36a-3387-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-data.epistemiconflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611925, "uuid": "c07c0bbb-32ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-gate.ontofluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775688312, "uuid": "9a59539e-339c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-node.inferentialisflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775632506, "uuid": "ab6c57c9-331a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "force-point.dynamismjuply.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775615885, "uuid": "f872adb3-32f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forge-svc.dialectonforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775656925, "uuid": "86889118-3353-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "form-check.shapeprimrose.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775658548, "uuid": "4d7a4874-3357-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frame-hub.shapeprimrose.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775662628, "uuid": "cd85655e-3360-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ftpemails.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775657707, "uuid": "58806484-3355-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-api.shapeprimrose.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775675524, "uuid": "d4835003-337e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-io.noospherecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661425, "uuid": "00b94063-335e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "google-services.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630645, "uuid": "5648ce41-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goynetfiles.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775628489, "uuid": "5167e6f0-3311-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-node.pairingreptile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775618946, "uuid": "1950583b-32fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid-api.inferenciumgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775681225, "uuid": "1a9ab892-338c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid-core.ontoversegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775611565, "uuid": "e993bde2-32e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid-portal.epistematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641570, "uuid": "c62b1c4b-332f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hard-svc.dictatessullen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775666464, "uuid": "bc4c0a21-3369-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hist-svc.monarchold.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775646255, "uuid": "ae64de39-333a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hsgeowvi.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775691007, "uuid": "e090b038-33a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-gate.theorexuslayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775619970, "uuid": "7b9cb828-32fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-secure.theoriconhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775655485, "uuid": "2c56c4e6-3350-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "image-api.iconoguroque.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775617926, "uuid": "b9695cdb-32f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "infer-unit.inferenciumgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775687290, "uuid": "399aeaa7-339a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "infer-unit.inferentialisflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775646248, "uuid": "aa5c756f-333a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iridiacheats.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668150, "uuid": "a9367f57-336d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "item-svc.goodtwain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645651, "uuid": "46509604-3339-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "item-svc.selzovestments.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775633525, "uuid": "0a9a2b3c-331d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kinetic-io.dynamismjuply.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775665152, "uuid": "ae0a6c3f-3366-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "king-logic.monarchold.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775608385, "uuid": "82603424-32e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "know-logic.gnoseologiccore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775678164, "uuid": "f9f00f83-3384-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "know-node.gnosticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775636225, "uuid": "5415fce6-3323-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lab-check.sciencestupids.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639285, "uuid": "7402d62b-332a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-vault.ranchitro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775614208, "uuid": "1121b5b1-32f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "law-check.axiomaticsphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775683565, "uuid": "8d0ccb97-3391-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "law-check.axiomorphengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775622010, "uuid": "3bb03245-3302-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "layer-check.systemicitylayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689326, "uuid": "f6adf0e4-339e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "layer-io.theorexuslayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641930, "uuid": "9c95c7cf-3330-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "line-vault.dictatessullen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663470, "uuid": "c3acf3a8-3362-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-api.emissarysooth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775669050, "uuid": "c1af9887-336f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-hub.goodtwain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639884, "uuid": "d9577584-332b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-svc.ranchitro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670784, "uuid": "cb3adae6-3373-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-hub.apotheosbring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607064, "uuid": "6f110d8c-32df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-api.noeticstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775617625, "uuid": "05a9144b-32f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-gate.dialectonforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775686931, "uuid": "637d7b14-3399-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-gate.dialectosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775676545, "uuid": "34ce601a-3381-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-node.noospherecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775619605, "uuid": "a1db17a9-32fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-vault.inferenciumgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775674867, "uuid": "4cc3a1a5-337d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "magic-hub.assyrfantasy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623690, "uuid": "24cfeee8-3306-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-route.systemicitylayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775631846, "uuid": "225e9a8b-3319-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-svc.naminkaprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775682185, "uuid": "56477981-338e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "map-log.ontoversegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672525, "uuid": "d8c14edb-3377-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mark-gate.excellsadarma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775628008, "uuid": "327a7b08-3310-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mark-svc.ministobelisk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775668506, "uuid": "7d3e5bd5-336e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "match-gate.goodtwain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775610546, "uuid": "8a19bb1c-32e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matrix-api.epistematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775691365, "uuid": "b6029432-33a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matrix-flow.systematrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684891, "uuid": "a3527e50-3394-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matrix-hub.axiomorphengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643967, "uuid": "5a9e0ff7-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matrix-svc.fastidmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679608, "uuid": "566a0900-3388-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-api.epistemiconflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775657885, "uuid": "c25de637-3355-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-node.shapeprimrose.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775609885, "uuid": "0065bf66-32e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-point.epistematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775642230, "uuid": "4fa8b7d9-3331-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-static.fastidmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775664790, "uuid": "d6378f5e-3365-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "message-hub.emissarysooth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684048, "uuid": "acf1a87c-3392-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mhatuminerals.africa" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775675225, "uuid": "21c7d099-337e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-sync.noospherecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689690, "uuid": "cfa7d0db-339f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "model-api.theorexuslayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620571, "uuid": "e18cfe07-32fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "model-check.theoriconhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775641269, "uuid": "12918e56-332f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mood-log.dictatessullen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775673187, "uuid": "63366d91-3379-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "myth-logic.assyrfantasy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624585, "uuid": "3a4a2880-3308-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neural-io.cognitrixvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775635866, "uuid": "7e223a36-3322-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-log.boredistascan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775691906, "uuid": "f883cdc5-33a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-api.systematrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775615585, "uuid": "4594a352-32f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-node.axiomaticsphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623266, "uuid": "27c4323e-3305-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-svc.systemicitylayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775665391, "uuid": "3c67846a-3367-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "past-api.monarchold.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775678525, "uuid": "d12aa301-3385-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-svc.gnosticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775670126, "uuid": "42a0d228-3372-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-svc.apotheosbring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775627045, "uuid": "f48cbcd3-330d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pillar-node.ministobelisk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775654883, "uuid": "c57a8d65-334e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixel-trace.iconoguroque.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775689025, "uuid": "4381fd5c-339e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-gate.inferentialisflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775662564, "uuid": "a78cb26b-3360-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "port-hub.covercotehour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775632684, "uuid": "15b2ec9c-331b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-api.dynamismjuply.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775660165, "uuid": "11ab7df4-335b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "prennixo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606525, "uuid": "2d619fa9-32de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-io.noeticstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643671, "uuid": "aa9ad6ac-3334-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-io.fastidmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775659868, "uuid": "604983b9-335a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quiet-node.dialectdozing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775639524, "uuid": "02c9f3c5-332b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ranch-hub.ranchitro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623031, "uuid": "9bb4f9b0-3304-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rank-index.systemicitylayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692145, "uuid": "874481c9-33a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rank-node.systematrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775646251, "uuid": "ac2ea5ab-333a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ravoqqux.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775634485, "uuid": "46e84e31-331f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "read-api.boredistascan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612226, "uuid": "73c7963e-32eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "real-io.ontofluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775660647, "uuid": "311fec64-335c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rest-gate.dialectdozing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672825, "uuid": "8bccc349-3378-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-hub.excellsadarma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607726, "uuid": "f9c5e0ea-32e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-vault.gnoseologiccore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775665812, "uuid": "377ccc06-3368-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-check.monarchold.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684647, "uuid": "11cf0c5f-3394-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-svc.axiomorphengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630828, "uuid": "c33040a4-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "run-log.naminkaprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661908, "uuid": "20374dc7-335f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-node.covercotehour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775629506, "uuid": "af9b91fa-3313-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scale-svc.pairingreptile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775634245, "uuid": "b8001f33-331e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scan-gate.boredistascan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663230, "uuid": "3430d83e-3362-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "send-relay.emissarysooth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624951, "uuid": "14323d9f-3309-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sense-api.cognitrixvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606708, "uuid": "9aea4d50-32de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sense-node.noeticstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775676846, "uuid": "e87b0c42-3381-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shell-svc.noospherecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775669765, "uuid": "6b69b01a-3371-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-node.apotheosbring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775612886, "uuid": "fcff2883-32ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-node.ontofluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775632868, "uuid": "83354fc4-331b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-svc.dynamismjuply.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775680566, "uuid": "913b35b4-338a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-svc.epistemiconflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644987, "uuid": "bac416ed-3337-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shop-hub.selzovestments.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775656566, "uuid": "b01ab82b-3352-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sign-gate.iconoguroque.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775627345, "uuid": "a76ed400-330e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-vault.ministobelisk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775628186, "uuid": "9c4f7666-3310-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "skin-check.pairingreptile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661606, "uuid": "6c4ddba4-335e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slot-api.covercotehour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775677508, "uuid": "72c87e2d-3383-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-api.gnosticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775637544, "uuid": "66a80b6e-3326-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-io.sciencestupids.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775623987, "uuid": "d5c1b4fe-3306-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-point.cognitrixvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775664071, "uuid": "29af7150-3364-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-svc.emissarysooth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775658184, "uuid": "750ef0c6-3356-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-svc.shapeprimrose.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775609165, "uuid": "5319518d-32e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "source-hub.gnoseologiccore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775682907, "uuid": "04e92206-3390-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-gate.ontoversegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775690345, "uuid": "5643512c-33a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-node.theorexuslayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621351, "uuid": "b262649b-3300-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-unit.theoriconhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775660285, "uuid": "591cb797-335b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "speech-svc.dialectdozing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775613967, "uuid": "8180eda8-32ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sphere-api.axiomaticsphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775685312, "uuid": "9e5f0b86-3395-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sphere-api.dialectosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775652726, "uuid": "bf5d189c-3349-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssowindows.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775686270, "uuid": "d93aaae3-3397-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "state-svc.dialectosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775687644, "uuid": "0c8ab483-339b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-api.inferentialisflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775616606, "uuid": "a66d58b9-32f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-check.dialectonforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630166, "uuid": "38d5474b-3315-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-io.naminkaprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775667726, "uuid": "ac4192f1-336c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-node.goodtwain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775619311, "uuid": "f26d10e0-32fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-wise.inferenciumgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645290, "uuid": "6f6121d8-3338-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stock-node.selzovestments.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775626684, "uuid": "1d13de96-330d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stone-api.ministobelisk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775674506, "uuid": "75a99b5d-337c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "story-gate.assyrfantasy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775607366, "uuid": "22da0de1-32e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stream-gate.noeticstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692626, "uuid": "a5d030b5-33a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stream-svc.systematrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775636884, "uuid": "dd3b5929-3324-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "study-node.sciencestupids.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775645946, "uuid": "f61bb848-3339-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "style-log.selzovestments.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775610845, "uuid": "3c867920-32e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-node.epistematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775679848, "uuid": "e5cac5a4-3388-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-vault.epistemiconflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775616307, "uuid": "f4397c97-32f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "synth-io.dialectonforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775669527, "uuid": "ddb09893-3370-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "take-api.apotheosbring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775674206, "uuid": "c2b30475-337b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tale-svc.assyrfantasy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775685611, "uuid": "5064ef56-3396-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talk-node.dialectosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775658906, "uuid": "2313600f-3358-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talk-sync.dialectdozing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775631187, "uuid": "990ee69a-3317-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "task-api.naminkaprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775659565, "uuid": "abfb0def-3359-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-log.dialectdozing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775636527, "uuid": "084922df-3324-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "test-api.sciencestupids.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775672108, "uuid": "dfff7242-3376-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "test-svc.excellsadarma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775640606, "uuid": "877a8e4c-332d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "text-api.dictatessullen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775621650, "uuid": "64cabb1e-3301-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "theory-log.theoriconhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775617264, "uuid": "2ed20b75-32f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thesis-log.dialectonforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775685971, "uuid": "2707d4eb-3397-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thesis-log.dialectosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775606945, "uuid": "28466d7f-32df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thickentributary.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775624285, "uuid": "87465fa2-3307-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "think-node.cognitrixvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775675887, "uuid": "ac92b15f-337f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-api.noospherecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775661245, "uuid": "9568e0e7-335d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "time-check.covercotehour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775669226, "uuid": "2a87f851-3370-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-logic.apotheosbring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775626385, "uuid": "6b57beeb-330c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tower-sync.ministobelisk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775687949, "uuid": "c263f2dc-339b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-log.inferentialisflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775618225, "uuid": "6b7903f3-32f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-node.inferenciumgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775677206, "uuid": "bef0906d-3382-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-point.gnosticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775635565, "uuid": "caf945b3-3321-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-svc.boredistascan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775629807, "uuid": "62a12db3-3314-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "track-hub.pairingreptile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775663711, "uuid": "5338372d-3363-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "truth-node.emissarysooth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775680264, "uuid": "ddcbe424-3389-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "truth-node.epistemiconflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775609525, "uuid": "29afe711-32e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "truth-svc.gnoseologiccore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775643250, "uuid": "af8dd21f-3333-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-node.fastidmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775615224, "uuid": "6edcd56a-32f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-vault.axiomaticsphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775684285, "uuid": "3a4e73cd-3393-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-vault.axiomorphengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775631545, "uuid": "6eeffb05-3318-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-hub.naminkaprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775677864, "uuid": "472d580a-3384-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vector-hub.gnosticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775625307, "uuid": "e8b0857e-3309-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vector-svc.cognitrixvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775682605, "uuid": "50cc1089-338f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "verse-svc.ontoversegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775634906, "uuid": "41cd7f46-3320-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-hub.boredistascan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775655664, "uuid": "96949a2b-3350-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-hub.iconoguroque.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775620929, "uuid": "b7069edb-32ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-port.theoriconhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775690645, "uuid": "09200478-33a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-svc.theorexuslayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630649, "uuid": "586736ad-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wbanking.coop15abril.fin.ec" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775644631, "uuid": "e65e6221-3336-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wear-api.selzovestments.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775671205, "uuid": "c6349118-3374-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "win-point.excellsadarma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630645, "uuid": "5629fb39-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "winstonchurchill.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775659265, "uuid": "f90f8fb5-3358-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "word-api.dialectdozing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775640247, "uuid": "b164c023-332c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "word-check.dictatessullen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775630526, "uuid": "0f2b2b12-3316-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-flow.naminkaprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775681584, "uuid": "f090e2f8-338c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-api.ontoversegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775660945, "uuid": "e2349c48-335c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wrap-logic.covercotehour.in.net" } ] } }