{ "Event": { "published": true, "date": "2026-04-05", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-05", "timestamp": 1775434521, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "6b2df14e-2072-4ab1-be36-4939519cb5d2", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775348539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348539, "uuid": "b6c739fb-ed3e-4ad8-99fe-d890efd2e7d2", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348539, "uuid": "3cc16907-ac3e-4556-9452-426b5926cb5b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775348539, "uuid": "9bd5bfb7-6a34-42c0-9fa3-c6e3049e437d", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775348539, "uuid": "f07921d7-d5ac-47cd-b222-a2c7e37cf6f1", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775348539, "uuid": "13970f6c-19fc-405b-a804-18176710f409", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775348835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348835, "uuid": "7e7452c4-874b-4d41-ac0d-da5efd315c78", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348835, "uuid": "0ce3f0fb-059b-4dd3-a3ef-adb0427bb749", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775348835, "uuid": "6d855d95-f278-48dd-931e-352a62ebabab", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775348835, "uuid": "33d7f953-2ebc-4b12-ba11-e532e5e74fa5", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775348835, "uuid": "9bd65145-c0c1-449d-9fba-b21cfb412eb9", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31c8ec14-308d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775351840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775351840, "uuid": "95089c55-4333-4225-9d23-10200dd97aac", "comment": "Malware payload (Mirai)", "value": "d2aac4f017a705e1d5cf83fabd963872", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775351840, "uuid": "7de9a900-6701-4462-8348-7ab0c3a647d6", "comment": "Malware payload (Mirai)", "value": "409fad8fa5203e0eeb4cbde4e6354cb4242c020c0874238593375dc1fd842ae4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775351840, "uuid": "7de1a8f0-7713-4635-8da9-fe6f275d51b2", "value": "T1EF33F942DB47DEF3E80314F102B7EB369930FE6B0C35D686D7647DA2A9219E066173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775351840, "uuid": "b154ed2c-8c10-4973-807e-eadc20f068c4", "value": "768:PieS6+LnfrIYkpSUcfyehEdVd/xzScbF6IeqZH3tqLNCXehXI932Ki8Jif26s/KE:KesLsYhhgWJqB9TXehYJ2KrAd1TcK1m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775351840, "uuid": "dd323bd1-889f-4820-91d4-c41096b337ab", "value": 54028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775351840, "uuid": "7e21c997-56e5-4c65-8fce-8b78ea61d2e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "219f57df-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "5050197e-58c1-4b15-a842-1aaaeffc1d03", "comment": "Malware payload (Mirai)", "value": "e6784d49b6a3b2c1e4897e0a9e2ebe90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "d064eeaa-f26a-4699-8537-c91e4c955e75", "comment": "Malware payload (Mirai)", "value": "f99a34410fc5e5de197a0f7927188a653744860a7339eb18993dbe6c5de97c26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "bb220251-bc9d-4a48-a6c4-7d99de5934b4", "value": "T15FD22BC6BC91CD1BC9F451B76F1F9288331293E1C28B3657C8594B68279B25B0E3BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "c07e6053-6a9a-4bbf-8326-0ad2408acd14", "value": "768:1RuzddaQ7DSUfiq+S+Y/O+saWC+7o++TW6VQSMU0+pB4O6+hX+L+c+Ib:U7NJ691Uel7CDB4shuqnIb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "61adb5e5-71de-4582-8a82-b6fb5735575c", "value": 29208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "bac65371-f903-404a-94bd-0a706b6c4e10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21a62eca-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "6af11e22-8723-4e9e-8913-fca46479b3c9", "comment": "Malware payload (Mirai)", "value": "b24a63f8c5f9c6830b65deca811ee9e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "a043e8ec-4f6b-4f96-a17d-8f8d9a628853", "comment": "Malware payload (Mirai)", "value": "082121edb46ad791d60420d235560eeeb5a71520066c9fb0a1065e4e1d1879bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "a595775e-406b-4ad8-a80f-1f4cd40f87c5", "value": "T1246317A3F901DE7AF41BE2B744D30919B630FFB60D9306B272277856DE750E41862E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "ca352b15-6005-4e60-b9c0-b6cd39833ca6", "value": "1536:1pmhqexw+8XqLuUF9idktsLMazXRhxJrtXvPt9HHAzcwPdZMZnzd0yPoyo:/m5wnqLuUF0GtUzrlvPt9HHAzcwPdZMy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "54224da1-8115-4332-95ec-8aac80328a20", "value": 72684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "6ecbfce0-bb77-4789-83db-21cfbe8977da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21a8f4dd-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "1496ba22-3326-4cd7-94b5-836fa386eed6", "comment": "Malware payload (Mirai)", "value": "40cc52e63aac0bfd3151eadb955417ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "b67083d5-7224-4db2-a42e-10eb9bf069b1", "comment": "Malware payload (Mirai)", "value": "228b01b7cbb4acff60ccf8894fb333efe662a445fc33f1347756e4fa0dd11c58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "150aea30-8ef0-4e28-9dda-4f4017b6534c", "value": "T10073C8467E228FAEF26982744BF30E31A75877D727A186C5E25CE9401F202CD545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "4b50d149-54ed-4c8b-932c-52ba3cc8ad32", "value": "768:dlzvJE2ynjMwI+9yt3US3rFwCw4yOHMWPz3lWJIINOyk+JexfdIjbNpRXg7Id:TbJXTtEW/64Pp6He2NnXQ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "173a92ff-854c-4bf9-9ed6-2c6a6af3ba2c", "value": 79112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "c65b649c-67b9-4dcd-a585-a69466ad4c20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21aa557b-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "90d9e5ff-d085-4b4c-8853-bda4b7ea2aa9", "comment": "Malware payload (Mirai)", "value": "c0227dd49fa7ae6253bd30af6923ed18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "f19f3bc8-1315-4db9-8180-800263925ef9", "comment": "Malware payload (Mirai)", "value": "179a6adc0d6377ea4b8d76483574e69e973615a6476c46cd0276b604f2e89d92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "9773b35c-341c-469d-bfec-36f6dc716f0c", "value": "T1FF530942D353D4F5D44315B011BBEB799630EEA20530D95BCBA8FFE39E33AD26016A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "c06fd38e-d4fd-41e0-87f6-c59bfb4e920d", "value": "1536:wvllDe3dP311AJdMFqt5kUK6QC4Qw5ffosIltUJ318+qxr:wNlMA80t5PJh4Qso2+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "74b0d597-c118-4f35-8be6-cbef39e8b992", "value": 66316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "84a9aa45-9c65-44a4-a916-912b412cc836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21af6d01-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "074f15ac-4490-4657-9985-fac68d083ccb", "comment": "Malware payload (Mirai)", "value": "69132aa576272644d8e7bddba97e4c04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "03d9d832-db2f-4629-bd29-e9856e1038dd", "comment": "Malware payload (Mirai)", "value": "6bfebb9caeb383e28af35f4429ddd9410f087ce33cebdcaa4c894db9a13ad30c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "77e35549-920a-4cd7-bd33-0e23b7a85467", "value": "T1434328539A269F0AD54778F025F28E720B52FC2A59631FF5B036EAE85643DC8B1123", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "cf00993c-6757-45fb-b605-65e3be271d21", "value": "1536:d+ru8Z9Ww6JKRCGVe5c8FrTALYKaA7CJ:d+rDZ9nXRe5cMHA7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "799afcca-e9b7-429c-8e7a-2f2d8dfe00a8", "value": 57344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "2d2a0780-0f28-4fe0-9d85-2eaa14d945ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b16328-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "32af299c-e8a5-40f2-a73b-12e69bcd85e5", "comment": "Malware payload (Mirai)", "value": "c9699797d4b800981c8201119c475195", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "fdfb59a4-4758-4e43-8ccb-ec7c1bc01a7b", "comment": "Malware payload (Mirai)", "value": "2bfa803d1e3de85337e3014217cd696395b2fcd43df64faf08d486ef430bf50c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "42d2bbfa-7beb-4284-8a03-653d797d7fb4", "value": "T1B9631A86BD419F03C5D220F3BFAF41483B166B69D6EB3243A925AFA423875D70D3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "452a840d-e05b-438e-b8e8-291e726e55ac", "value": "1536:K5FomVbs6a7Mz0vuPFeozB4yoZvs51sLtptHmrA/8FrLfO6vvTiS:O74gss6KrZTiS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "3bcf3cd7-8df9-45ac-a11e-9521af7f74f4", "value": 67928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "51bf385d-7455-4048-88d0-a1d3c98973dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b497a4-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "dfd5723d-aecd-4d29-856e-f98f24341ce1", "comment": "Malware payload (Mirai)", "value": "1478b4d2cf979dda6b279ed83315c0ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "c9f1eadc-0190-48fb-8e99-c6ed692cc25c", "comment": "Malware payload (Mirai)", "value": "f4814c2f30e6131789c31ba5219252de9c6fe92c373a62bf878599e9044c2477", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "a2d7bb6c-9926-4eed-9112-19e220d96694", "value": "T144634A27BE220E17C4C375F922F30B34E5B9AB9E2CB846167C612DCDAF645D031167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "1b1aa8ed-1d6b-4e25-ba10-efce64ce9de6", "value": "768:dESTo8tA1Z1iR06CppgDbO+s5VqH918PE91tNe1ttnpWQiIh:dESTo8tA1Z1iR06C3is5aztYttnAQiW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "93905f7b-26b3-4573-85e4-c23ff1e8d439", "value": 69464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "97f56272-24ef-461f-959e-351ed3e190d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b4aa1e-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "e9ea723a-7906-45e1-8039-77f084327b1b", "comment": "Malware payload (Mirai)", "value": "e9057075d15e325efa1acf6463e9583b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "6962aa1d-f6e5-422d-9e3b-41636f84d321", "comment": "Malware payload (Mirai)", "value": "2301c22590b771b4283c13b8acb9e786e53f9e7e7e20fb558b8f969eac2afba9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "3e66d988-4873-4cde-9137-5c9503cbc742", "value": "T126730802EF514FABC82FDDB306FA0A11348CA85B26B527767570ED68B7561C709D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "1c329b70-d32d-4486-a7ee-2f708b322ee7", "value": "1536:UlpF9lyxdP/bzcJXziKi8iXNpZfRqUiHos2w28nAFwWR6kXi:ypF9OBsOJX7IMbGbky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "43c00ef7-5af8-4502-9d4c-9e5c136db59b", "value": 79112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "c61ff112-f203-4fd3-853e-c898f810df00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b8efe4-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "2db68afc-eaec-4c92-b175-66c955fa6f92", "comment": "Malware payload (Mirai)", "value": "2506c106b5207c882de9f127e1175d52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "3f79a0f6-27e0-47a7-a501-5464a03ad4bb", "comment": "Malware payload (Mirai)", "value": "a037866f92e33a4f8bf7083f211636ff053be45ff7d45fdca24388400323a486", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "d108ec0c-08e1-4a66-bee5-226c3c5b4df6", "value": "T120732B46B9418B12C4C311BAFBAF454D37036FB9D3EF72129924AFA023865E70E7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "7cbd351a-60f4-4468-8f7c-4c8b5a8b5f5d", "value": "1536:7ABnVH5+KloMpwWZh0pK2VuT32NZkazLg0NMfi/xvsLVHO7UKb+5Kdx6DYahX:7YrKMTmNaaPvsJHO7tqeYBhX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "36821423-2ad6-4459-935c-70d853786611", "value": 78164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "2ace7a31-b05c-457a-b5dd-c98315f18bd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21bc5723-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "63201345-233f-4968-9717-fb0102d4b658", "comment": "Malware payload (Mirai)", "value": "4e94c84d9032e2c49fb2d57acfebe11b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "cbc90cd9-c715-4422-830f-f6ca87a28e84", "comment": "Malware payload (Mirai)", "value": "908a90f59dfcead5fcc6a8ad7eaac7799dadf1ebc083306c0b4c5b5ae23c9e63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "bb50d7c6-77db-4ab6-a24c-2b56356672f3", "value": "T1EE930946F9819F02D4D220BAFBAF41493313AFB8E3FA7111D924AF6123869D70F766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "d3d6dc62-2199-481c-be44-4f99b3eccce6", "value": "1536:C9nORzmu/psBUtnIY/2PuT8J+N+UsaF5PKHpXwmClMiPQpgLscDFtY7/FpFX:X5HjTY8+UsaF5PKHpqQpgLRZtMFXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "3a2b9ac7-5e59-48ea-94e4-e219af2c8303", "value": 90576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "3bc93ab5-116c-41a2-9d97-2e735805f324", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21c35ac8-3090-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "b676bde8-04c2-4e00-b0e1-e23ea63bddf7", "comment": "Malware payload (Mirai)", "value": "456e5270b6f144350d2a0c3b3a29c7a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "b22599f1-d467-482f-8220-6677d8b9c7f6", "comment": "Malware payload (Mirai)", "value": "a9549846f4fed8c2067218770280c61a3457d4b2341047ef0682b9b6f158c115", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "edeebcb7-02c6-4329-8d5a-e47e5ffb0655", "value": "T1EE33F745FE43CEF7D40754F101E77A3A8D30EC2A0835D6A5EF51AEA2DA276D062173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "24ea87e2-60b8-40ae-bc20-110b886dd182", "value": "1536:SF4lmweqSqZWWewfFUrQHRo1fN/KqyOlQ2a:plmPkVTfFUrQHO1fN/KxOlQ3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353102, "uuid": "5ce0f24e-dd84-4798-9c1d-0904c58a8985", "value": 54892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353102, "uuid": "6b06a531-4212-4d45-b08e-0294f1724c59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "636f5cc6-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "0b4e2aed-dacf-4815-aa50-58293e5aad78", "comment": "Malware payload (Mirai)", "value": "b3617e92e452639af4a8d1108618f2ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "49e3cf1c-692c-40ad-9a67-f601f45f3255", "comment": "Malware payload (Mirai)", "value": "a8fba0d6211e9897ef7dcce3728199aa8fb1f1442586865e74ba9b8dfa55a9cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353642, "uuid": "e5c3fe36-0e72-4948-a7d1-b910f8be8d2c", "value": "T16B533C13BE82CABEC447C1F447F766359D32BC7E0932B1D9A7D4FDA12A49ED029196", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353642, "uuid": "4f7df16a-3d42-4a16-95f8-9b21ee2a4844", "value": "1536:mJZNPtKn/DBXFXvtjCsCV5zJi6FsT5RPG3ooK:wZNlKn/DBXFXp2V5zJXsT5RPKo3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353642, "uuid": "94b3d8d1-6edc-4fd7-9ecd-62a1bc229303", "value": 62008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353642, "uuid": "c8bb4214-e70d-40fe-bf10-4e52f8134ea5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b96010-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "5e64cc87-bc5e-4faf-9535-ed6da980e41b", "comment": "Malware payload (Mirai)", "value": "04c77a9139ed875efbd20946669f3cf8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "9985545e-9d25-41ec-a209-97c988377672", "comment": "Malware payload (Mirai)", "value": "a95e4e2c9aeb0410f8ea3e48888eb2e386056336625dea408dd568f5d4c7d58e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353642, "uuid": "4c012c63-53e2-41dc-82fc-d4e265de355b", "value": "T157F36C17AF418A6BC59D82B51FD793208733F03A17177747A778A9B52E0E7E82E4A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353642, "uuid": "ed856335-0d3c-4fce-9d60-be626d0a0fef", "value": "3072:gZNlKn/DBXFXp2V5zJXsT5RPKo3Xpx79ErrjQoc7S64F2wnNpv/uij0lqZG6:gZNlK/DBXNgnzJ8bx3XpxyPjQMbpv/uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353642, "uuid": "e6c743e2-6692-4cd2-89f4-c9bdee0e064a", "value": 165960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353642, "uuid": "03aaf2f2-a412-4797-a441-4d59d458e158", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8afd51d-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353758, "uuid": "95972010-ba0d-4f16-aeeb-62959104e221", "comment": "Malware payload (Mirai)", "value": "f86dab9f11ba4aa886550c7a141f6f3a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353758, "uuid": "d133f0db-a49d-4985-82fe-b54e1491fb2d", "comment": "Malware payload (Mirai)", "value": "ec2913b36b2febcf01a9f097cf4bcb3a35553bdcf331c697f5acc54d59e0dc80", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353758, "uuid": "af42fa69-93e5-40ee-909f-9112112bfc65", "value": "T12451D28E125240F9BC45EE17F4669F9078A09FDA4EE38F4EDEDD2B5251CCC1468346", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353758, "uuid": "b47ddc6d-9def-4158-b1f2-bf34cd86f083", "value": "24:fiLElAgybCbrnRnEL+V6fT2IJCCCrlClrpsgx/C/V1Tb2TI:yJ+P2I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353758, "uuid": "e77c107b-6f88-452a-ba97-7e73a091cb3d", "value": 3120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353758, "uuid": "a37aa549-502c-404a-9973-81ae20ac36df", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdd13e1a-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "42bb38a5-8182-4021-bd26-37dc1681fffe", "comment": "Malware payload", "value": "eb25e44331bf9140c99179da8c03b85d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "ba69beee-0c9b-48d3-9279-b254e7139de6", "comment": "Malware payload", "value": "1db18a88af54f1fcd233f7b71f0354c0be11957e91228ab142c243540735eb2c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "44633416-da97-41c8-9427-6832d0d89757", "value": "T1D6F45C07BF505FEBC49FCD31492EC30601EDD4C389D1A62A71FC4B8CBA9965A4AE35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "f375700b-11ba-46d2-9448-1d0d568d2354", "value": "12288:9JKNfIkDA1nMlBLqGKy/zM5j0/yfK34HJznWabXnlf+Ej1+ZowpHC5G4RpP8w19R:WN9DAsqGK+ABfKnzsoaBW40fOFfOVlj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353820, "uuid": "b780dab7-e272-42c0-9b0b-257bcdc24ab7", "value": 763052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "53ae0376-db6e-401e-bc57-44c8310c60ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cde2d0e9-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "e92de2e3-f1dd-4145-9ea0-eb361d1d2423", "comment": "Malware payload", "value": "c3fdbbd981264eb2d9ef06f46c149e70", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "c1e5500a-864f-458b-b353-17dbe84848f5", "comment": "Malware payload", "value": "7ec477b3b0d302a02b5c5667218334b7c4bccb946318ba413d16a5f24f53fab6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "23ca22a8-75e8-4d05-9c45-fa252d291307", "value": "T19CF46C5BFD6E3C43E2D6D37E9B4A83B0A22BB190D22351937581432CD4C6AADCF716", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "78f727ac-05f8-4d70-b98f-a19ee96a94b7", "value": "12288:mWZvmf1YDz6XTos9vbz1j8u9dWs2Ehw5+9SEWDKTjzzn9I:lzyXTDbBd9cHkTjXn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353820, "uuid": "f76a5f82-7e37-454b-9c76-89c7abb52a34", "value": 788544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "3523b4c5-7ab8-4c83-9d0a-70a299b35639", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdf69d78-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "f1eae037-24a3-477c-84a7-58abd55763cb", "comment": "Malware payload", "value": "d9905dc0e7c44867c5df1af06915446e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "cc9fbc3a-94c5-4db4-9f0c-9291f165b3bf", "comment": "Malware payload", "value": "597bd6b5a59e36a4e6535796cce6bafa40616d7125450b37f7432e947e9ca1c0", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "7a1e4c67-760f-41f4-a634-4848f265e467", "value": "T1EDF47C5BFE6E3C43E2D7D33E9B4A83B0622BB190D22351937582432C94C6AADCF715", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "e61a24b2-84aa-4716-b862-f33378c8c86e", "value": "12288:amSv8/lgeiwwzRbOqyYLGitlU9aNnWC6vRw5+9YpUyYCsCP5W:J0eiwEbP6iT+GTp9YCjP5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353820, "uuid": "fec81983-209e-432b-8874-989ae32b2de3", "value": 786704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "9d0976ee-1487-416a-a636-3a29e9100594", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdfc64df-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "8e4d350f-bab4-410d-a844-16c2376dcf78", "comment": "Malware payload", "value": "52ba81dc6673289d5fd2a7bd19f03b2c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "da7be25d-768e-4ac1-9fe5-5d9bcf94fc17", "comment": "Malware payload", "value": "c39748874e353c14900a1e1d10bd3b998f477030c3eb735fd6414fc84ba9563b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "f3b2eeed-f9fb-4cb6-a324-2408b22da202", "value": "T1F7F47D89E7C2D4F1F66305F10A8FD7F60964A2165053F6F2EB8C26A77432B522E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "a44e6e0f-8356-49d2-8934-5f6c35029f5c", "value": "12288:U2UwPUhPxhb5IofnxSGzlbCZTzkl4Tox6o2AKymdhxwPyUrwQIYLu:U2UwPUhPxhlIofnxfzl2+40x6onKymdn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353820, "uuid": "8c5466a4-f727-4e03-be50-bccea48fb463", "value": 775072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "182e050c-b2de-4a59-82a0-82e583dd5b72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce049570-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "b9cb24ef-6d59-41f0-8091-8df0b8081db0", "comment": "Malware payload", "value": "184183a7c7ac29b9985677ce111c6a88", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353820, "uuid": "ee4f6aa5-e070-4966-bb3e-cf03391e0fcd", "comment": "Malware payload", "value": "6d711e3b780abbdc7c07a523f499618b525414c30fa987aba23f1f1648699e19", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "582838cb-2699-46e8-a38b-467c8b45c81e", "value": "T1DE054B42FB1C4563C9430EF16A3F5395F7257A4341F9922A370E97672621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "ecd2c070-4d47-477d-82e3-aa5d20e1f136", "value": "12288:6MPNEl89l+h0gqNLebLwKx6rgGNiLwqxip3Mm0NXfiyTR7ITc1pNxxY:6oNErhFqNLOEKMziLwqK0NXfitA17xC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353820, "uuid": "a96c8b56-eba6-45ba-a1be-3b4d5623ef6a", "value": 856664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353820, "uuid": "47038b28-8339-419b-ad4c-5901e4775860", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2360b8-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "c69d2caf-0a0e-43b4-98d9-1d86fd4f3720", "comment": "Malware payload", "value": "bfc352ab4f42735581008142cb9c9e04", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "77c50bac-5a5a-4bc6-b1b4-2ec7b211b34d", "comment": "Malware payload", "value": "ff707e735648511007fe60b4ac3c579b5acd0d228de56ec9de1e81f55c08fce0", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "129b908a-eede-4b9a-a113-1aa35bd95154", "value": "T11ED49D29F8447B47C89B9274808FE418737BB244075233162846EA797E83B7DAF1E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "5499cc01-f05d-4f92-9e0b-bbca2e2d03f3", "value": "12288:l+M8+Np8faWHwuMYvmKhoC/0zJU9qC5Bw5ApOcrA2MDxe:0M8+X8faYdMYvZGC8zykC5qeA3Dx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353821, "uuid": "db547471-9973-48ab-9ffb-e181e0f1fb0c", "value": 648496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "416d8263-d35c-4006-8b82-e32d4cf4c17d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce28de1d-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "833878e6-2d67-44fa-b9da-8e4b19f6dbfb", "comment": "Malware payload", "value": "3550c0589a66e9daa05af97bac18ef42", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "29cc0b36-d726-4f80-b6c6-3ef5fe0d6055", "comment": "Malware payload", "value": "b7d972d2c2de28fbf27e07e24d161b87a7ffbea1d907329cad1d41c8a757d2eb", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "0a65ee29-b073-4326-9109-ccb4c0ade681", "value": "T1B2D43956F8808F62C5D0257AF65F82A8731747B8C3DB720699189B383BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "82911346-a5e3-45ab-954a-57a00d0946a9", "value": "12288:TVC/6P+lB5mvlCrNixchrLdEk3yZhgpo+KS5vInA7VdVOK:BC/6P+r5huchrLr3yFIvInA7bVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353821, "uuid": "3ddfea0d-7a10-4fa9-a5c5-af98b326a6e9", "value": 640284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "07061357-e069-4251-b595-cbb12cca7b9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2e2f15-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "003ef8a3-94de-42cf-9b39-04ec3279b069", "comment": "Malware payload", "value": "70caee9e1353f4175ce5e4fe94f2573d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "43754e76-d0c9-45f8-b06f-3ea795fe3efe", "comment": "Malware payload", "value": "a029877100e49b9be309a8b2a1bc774593d1cccaf6dcf1a95827836f575337d6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "8a25cbb2-8676-4047-97fb-efa8ccd09a56", "value": "T12D058D2AB2B3F17CD11BC03407DBCAA24635F47526212D7B26C4DA353D66CE22369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "5767eb74-e81c-4b96-aeb2-522079b4c6d1", "value": "12288:/gEAN5RtwYP3GdOHj5fNOEZQNggW9GeYe5TQaWK2oo8pAYay10qHX:YEArRtvAfNglMeYYQDKb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353821, "uuid": "82dc87d3-9f51-4b83-bfae-35d6ecad619c", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "3e9bec93-a94c-406a-9a17-c74cea76edc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2e86eb-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "45419f5d-70a1-44bb-809a-74d7e0f005ae", "comment": "Malware payload", "value": "0065e9292850dd02a145cd9c4f825821", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "481d455d-0e8f-4c84-8a8a-76e783c116fc", "comment": "Malware payload", "value": "3654d6a0e6c589c33a1f3ff653ea1907b06ff276bdf833717c7a491beaa0807a", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "2057b70b-b599-4329-91e5-b404e3e5ebf9", "value": "T168C52810EDCB18F3E5072E3119ABA2AF27315D454F20EBD3D644BA79FE7B69108362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "3c841887-34b4-425a-96a1-69310d8aaf18", "value": "24576:262wrfyaN8GzXzkYY4SzTe5yjDMhTwIrYmRsvuThXbAxoQkbPJ+8vF9YhdMkFiHx:2620mmNYzArII0cQ1YzLm6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353821, "uuid": "a5a2b7ce-13bf-40a5-b79d-959bf684f89b", "value": 2523298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "2af130ed-ecfd-46d7-89f8-efa13eca3201", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce3b3d70-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775353821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "475f7921-21e0-406d-b3aa-77f6f1e63620", "comment": "Malware payload (Mirai)", "value": "50f012330873ff099439ec552ebb157b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "73753e8f-6fa7-4bbb-954d-d6188dde8823", "comment": "Malware payload (Mirai)", "value": "e19125348d0cfca8315789710e0c9f2f7765ea2e067e39c6dd56d2148740d94b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "d7952566-46ec-4c28-aed2-4b5d6f82a2a2", "value": "T13C158E89E7C7D4F1F65300F1068FDBE31524A2265053F6F6EB8C2A977432B616E162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "d42fb586-c206-4aba-9108-de58334dbf11", "value": "24576:5EdqshiJhprMPDYwt94dn1VwxNDbIwoP9n+1iWOm9Yqc8ab2l:mqshiJhOr4/wvA/Fnme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353821, "uuid": "e39d6087-47ec-48b1-aad5-58dc646c2f17", "value": 918656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "d66a90a3-101f-4e72-ae7c-558ee4f340db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce8f672d-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "83f53551-4f1b-4bf6-848a-9f25e0d1af20", "comment": "Malware payload", "value": "3adb8307fd9277196a87237ae1cc7991", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "860ca878-10ec-4290-9de9-7c1c8e1c7287", "comment": "Malware payload", "value": "d61a1ef6187aa4027990cde62997464f803fe3e65d773920d617b9e1e35c657d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "c4e41df6-735a-4319-8ca5-964f9b99cd8d", "value": "T11FC5F757B9910942C4E83677ACBE81C833664EBD9F8A631B5D05FA3C3ABF1D90A353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "ba8bd8c9-f386-498e-922e-3588bd02b7b8", "value": "24576:hx69sA6sJeqeTfcU6o/r1uEcGAj5O0zKSPiLlvEjSL3EFbgkxItdHqcGpPn9Z2AF:hrvJy85Fe24HrO0VpCY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353821, "uuid": "1e9f6abd-3f75-495d-82e1-1ac2c04730a3", "value": 2621602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353821, "uuid": "631016ec-52af-45fa-a7f2-9bd99b40872f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d087ea7d-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353825, "uuid": "65e61db5-48ff-43d3-a5a2-4a6d4f06205f", "comment": "Malware payload", "value": "c4bb8587a68c05ece2b04c2a88eaea81", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353825, "uuid": "f8870b6d-fc61-438c-8f10-945ede1f9f79", "comment": "Malware payload", "value": "42e0da1d702230d19a0e4802649adaec6847dd96880986589ffea6e2134e0912", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353825, "uuid": "f7c338fd-378e-470a-82c3-9fefcd85d9e8", "value": "T109D51A12BB28D70ED51932304DB2CAD86B696C8502D2E917B249F319F9B306C9D6FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353825, "uuid": "69eb0bdd-9b83-4e7f-b1a7-3917aafe72af", "value": "24576:rBjljElpuNHPHRSpUp1cPOCMNaYFFN4yb7RNUUKybMeSE9QCjblDEq9U98JkfyfK:rBjCiFUnXR87Zf8YHtQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353825, "uuid": "37eb2dc1-50d7-472b-9794-3491c101287b", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353825, "uuid": "c3b2da10-42d4-435e-9e2a-7b7668cf672b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1186266-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353826, "uuid": "c4999613-79a5-4d37-8399-02752cee9686", "comment": "Malware payload", "value": "ffaab78c5b61d07b29817258404b8e78", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353826, "uuid": "a607a6e5-d99d-4a92-b076-98ab20729246", "comment": "Malware payload", "value": "bb37cbc15950a349be7439401ca54f011dfe702752d2adcdc46fa9b309c62709", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353826, "uuid": "6d943a9d-28bf-4ef6-8d63-b5df26fd26a5", "value": "T101461897B9D25983C8E43677A9BE80D433630EB99B8753565D05FE383ABE1D90E383", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353826, "uuid": "ea0d0168-0846-41e0-a055-922dbff59579", "value": "49152:SGfaKpOFM460MX4utrq50Hmg5bKiBtU9pnJuRA5EIz:LpOy46lJ250Hmg5VapnJEIz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353826, "uuid": "83cb39ed-ed6b-4180-aad9-32fa6ba156a6", "value": 5832866, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353826, "uuid": "1533717a-3867-4f8a-9c69-30a919524e77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1be7313-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "f29381e8-6ae7-4b8f-b8ca-1434e8a6f2da", "comment": "Malware payload", "value": "6d3d4c1dd9ae8c2b708d8e9b4b48beb3", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "252b5078-49fe-48ed-94d3-dcc3dc004713", "comment": "Malware payload", "value": "da45353abab27cd4ef3ae49d5d6a4735c6c7967879d6d98a0dd809dfd8c7ad76", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353827, "uuid": "19ccec1a-35c8-4ad9-b1ef-6cc8619f8d3e", "value": "T11E261897B9D25982C4E43677A8BE81C433630EB98B8613575D09FE3C3ABE5D90E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353827, "uuid": "81357085-2555-4c03-b109-eba18f3bf96d", "value": "24576:DQPwS2MBwGwZ+UfZQfyq3NaEYOrsvvqipGe+LwonnU7/EwaYUGsOgC1dyRdySlz+:DGe7yzWuA4ZFyQT99PQTzCgDzl5Ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353827, "uuid": "c8b03661-44b8-40ca-bc5a-7ecb14651744", "value": 4587682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353827, "uuid": "227cac14-6921-4270-8463-4096b584118d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2017c8b-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d4c71b88-3193-405b-b93f-667402a61822", "comment": "Malware payload", "value": "a4cc8efeb7b26049660e0c890f5346bc", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d561d473-d3c4-4d8e-ac99-a777fda6f587", "comment": "Malware payload", "value": "2af9156c9758f56a5feaa9853559b7289cc2f85a953acf5485eca68d5a281367", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353827, "uuid": "79bacb87-23ef-481e-8eae-e18d22d6e6ac", "value": "T14FD54B17FCA114EAC4AEA236897351627BB1BC452F3023D72B90B6782F73BD099797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353827, "uuid": "129f845b-954f-468c-a51c-3500527b972b", "value": "24576:gVZSKSPsXvhdrSjcpHXAbXpr1HFnSQavqs+JSyOu9KaWFkA5tZkpDe9Qt3Yac:gV4hsXvhEjEkXhVavqs+Qy9pi5+3tc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353827, "uuid": "ad23f08d-19fb-4c73-893b-515af9fa5ba1", "value": 2760969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353827, "uuid": "87048c8d-0d1d-4fc3-b179-fa26d6a25d07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f9e460-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "a8791b12-e6c3-4bce-a708-996dd26c76b0", "comment": "Malware payload", "value": "6cfdc43ade562df8f9a396914df492de", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "f5cb50bf-5598-4a8f-9966-6e030fc928c1", "comment": "Malware payload", "value": "fc8ebf5cf4216b41daf55a16be30d281cde88fcaafe81e8e68fbc83a8019d690", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "bc76f705-a9eb-4c29-a5e1-43e2aa1ec70b", "value": "T165058D5AFE5E3C47D2DAE33D9F4E83B1A22BB150C21351633581432CE4C6ADD8BB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "648d3c49-2b4e-443a-899d-6c20cd4ec537", "value": "12288:Rtuf0jvtj0RaRbblCG1AECHf6P9KvNq04Ucgk+0w5CltvwyYmP4O3Lmxz:Lq0CRaRbblbfCCP9Kr4UOh3P4mLmx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353829, "uuid": "1994d0a0-c82c-4ea8-977c-804b463a57f8", "value": 864872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "7a1d2632-f030-4696-95cd-16d328b369ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d303cc0b-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "f6d52f57-76e4-4b64-80f4-ad2f6a05c7cc", "comment": "Malware payload", "value": "94f04f61c39207fda3fdca81a6fad9c5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "37fdd38c-4677-43d2-94ec-4e2de0e193c2", "comment": "Malware payload", "value": "a887e7188d347573cfe7891c46bfa9b5791d50923e9565a9bdd022510d7902cb", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "9b2323cd-3862-4d13-92ae-1a7d6c27bf69", "value": "T143058D2EB2F2F17CD01BC03447DBCAA24635F47526212D7B26C4DA353E66CE12369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "cfa7c16f-f767-491b-919f-78a50fd54e21", "value": "12288:EOiC8zQyod3HJ0xNg51NQPDJ/69aKkOlfBYxay2je/HXDv+:ICiQYNgfOLc9axEZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353829, "uuid": "40e0e1f8-7b38-46a4-911e-5429903225a6", "value": 830304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "3f5dfd6b-d53a-4b78-9b0f-e2b56c7ea915", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d306f51e-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "243b9135-7557-4f56-955d-53cd8a3dbf68", "comment": "Malware payload", "value": "efeb7c731fd74aec2d6b463ce856fd91", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "7cfe8b23-8ed0-4896-9adc-f438fe5b3f0b", "comment": "Malware payload", "value": "9a952339a4a10ebc8b873ef7b75ed2e8cd03383978f54076919fcc48930f4414", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "6c75902b-7d33-414d-aaef-c2bb5701cdbf", "value": "T1BC464B45FC1D6862C6C975742FB202D87339BC898F81D7276618BB3DAAF63588F132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "d61c458a-bfba-4cef-9fc5-cf88fb0f479b", "value": "49152:ygLx1dl1YqpUMCJ4T4XepdDesNRRyiFVgVy95Eo:ygLvdl1Yq6O7pdD7EVcEo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353829, "uuid": "686427d7-08a3-4fb1-bdc0-28c33ae0350f", "value": 5505186, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "25208fb2-2993-4433-a968-d2815682a9fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d30e748b-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "2fd0e613-9112-44f5-b104-6c01b13e5b2b", "comment": "Malware payload", "value": "5e571b38ac24a1d038433ac6ecaa1373", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "e4ed2643-43c0-42db-94af-da8f581f5906", "comment": "Malware payload", "value": "3c76a6ead44a6d16550aa5496dc94f6f96a4c797788f8005a112073128c28b90", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "cde4bbf1-a760-4891-bc07-7fb0da19b9c2", "value": "T176566B13EC9518E9C0AED1758A729263BB71BC490F3263D32B50F2386F76BD0A9797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "5b108aea-c300-4367-83ee-f98c0998d82b", "value": "98304:d3twHLzIfUdFSEpqLyDDD+/bIKLtqvopt9jM70q2pWDD5If6BW608A+zEy:5eracFSEpqLyDDD+/bIKLtqvopt9jM71", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353829, "uuid": "c1db6286-bfb9-4eba-91eb-c48ce2e093fc", "value": 5968137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "329e1492-99f2-4f78-a028-efd95e16ef4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3114772-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "1c9f980c-9673-4301-b8c8-99f0b732e389", "comment": "Malware payload", "value": "21f70bc5a29e9065ba13ed5edcfe7f80", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "f8b64750-723a-4cbc-9878-1aaa7352d1cc", "comment": "Malware payload", "value": "c0dd6461a178d7160831dbc928544b30f37cbaffbf7e19af61f175a8cceaa6d5", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "5b18225b-228d-4aaf-8351-58ac493c3c0f", "value": "T12C055C03BF805FABC49FCD31496EC30601DDE5839AD1662E71FC4B8CBA9D65A4AD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "90a95a4a-bfb8-439a-9220-2ce33c308840", "value": "24576:iAG3rDLz0fAW8sAJaCvTgTAZCULm2mO38Owy7:rS0FA8gpmO38O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353829, "uuid": "a1fa2755-486a-415e-aaa4-bcc834118cc9", "value": 837216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "f7a10965-3856-43b4-88ad-b817c2c293c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d323ce3a-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "fad65d95-e4de-4649-be4a-119919ecb643", "comment": "Malware payload", "value": "6c5897cb7e27cf2927188d1b064d79fd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "2a79f1aa-9234-4eb2-943c-9c1a2d442f34", "comment": "Malware payload", "value": "0077ed4380de2f3d6db00d566e94a7c8c28615abe3d5c2c446e6c0749ee2bd88", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "098236ae-b4d6-4217-b59e-d858bbe175e5", "value": "T181156D89E7C3D4F1F65300F1068FD7E71524A2265013F6F6EA8C2A977472B626E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "8956aa8d-fa4e-4f73-b51c-819333ca1cb5", "value": "24576:uAFVCphZRhoKZH3wxeqtTsQimxUKN+nIs11ECmAhI5e:zCphZRhDH2zGmxUdnI/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353829, "uuid": "226d71a1-854f-4467-938a-10f64fe8318f", "value": 922688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353829, "uuid": "72ef2dc9-e99a-400b-9623-dd88a4083a3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3bd33e5-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "6cc1391f-599c-4cba-a5ca-85de6fe0ffcd", "comment": "Malware payload", "value": "1e10bb271c300ae58ae76010fba47845", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "26fa7572-8519-4278-827c-803ac15688b9", "comment": "Malware payload", "value": "b0026a72a4e34f6ff5a2b0ac1e5f202b39412dbe9ef629119e4ea659e5323abc", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353830, "uuid": "0b434c15-52a8-40fb-ae33-7b12c0179125", "value": "T1E6157D2EB2B3B5BCD007C03447DBCAA29535B47522322DBB27C4DA353D66DE51369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353830, "uuid": "77b3ef28-f83e-45fa-a994-fb0560bc77c6", "value": "12288:sRstFBnNgAJJ2ro319IndWHI2XPpDTSaavC5RRd+FcVglW21FqYEayd+SMgI0zHX:sROrnNgxMF9lUaYYglWmqYIMg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353830, "uuid": "cbf7cd7c-2ed9-49c8-a4d2-8e949a39cbd5", "value": 961136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353830, "uuid": "6146b863-5ce2-4c78-a916-869b2e530c90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3c93101-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "eed61284-80ba-4c6a-9bc5-bf08dbec0bcc", "comment": "Malware payload", "value": "3c1a7aa1dc46fd8e14be790f4fb3ec9b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "06241da9-7a98-43e7-ae77-614b87679bf8", "comment": "Malware payload", "value": "7b83538c1c70a39fd2b3d73088f35a099de009dce83e8d267511aaad5a6f507e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353830, "uuid": "d39adc35-5f79-4285-be51-db721c805d59", "value": "T131265B53FC9518E9C0AEE1358A63A562BB71BC481B3123D71B90F6382F77BD069B93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353830, "uuid": "5d7a48b7-98de-4f88-87d3-6e56189a10b9", "value": "98304:bu4C5nhK+4bblls4FOx+QJH44WcQxLxAvEH:a1/F4bblls4FOx+QJH44WcQxL7H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353830, "uuid": "45e7de27-37e4-4f78-aace-4333f631951b", "value": 4702473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353830, "uuid": "63806cf8-c5ab-4e73-a073-126907234189", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d45daeac-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "254233df-3b10-4597-a2e3-50216b2d6dfb", "comment": "Malware payload", "value": "0c609f5012227fd7056c7ce154be0145", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "0120207b-375f-419c-87f0-dbd07cccfb10", "comment": "Malware payload", "value": "edce9183c39eacf64493e3497998fa3fe4ba76c1d94bb0ec0ff8f1a3ea61190d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353831, "uuid": "217b38af-c868-4880-a4ef-8793da0fea49", "value": "T1BD055C03FF545FEBC49FCD31496EC30601EDE4838AD1662971FC4B8CBA9965A4AD39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353831, "uuid": "fc114f95-27de-4f07-9a41-7f924fc694a1", "value": "12288:5g9x5pmxSmK+saqgeaKdobKXxC0jhmckV996tmVGXCD7tFKVrAlbe3egJtn9bbxG:iVNPIWn8xf9pOhIzo/DQBT+ZuRu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353831, "uuid": "e760bee3-7dd7-4b2f-bcd4-eccb10c86b74", "value": 836952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353831, "uuid": "658c8c29-5fe6-424c-b326-b29498356ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d45fd941-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "db280150-e138-4aca-b38a-fedb43b75981", "comment": "Malware payload", "value": "f825c68df2cb908bbe6e31a21b8f4bcd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "b027ddb7-5878-4b5c-9999-f3978f33e83f", "comment": "Malware payload", "value": "a925f807aa56a7bebe2ae1e0f52f6b37b86d2fd27493e43c1019265467e7e305", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353831, "uuid": "37a8e639-dcdb-48c5-9916-1d19536da220", "value": "T11DF43A56F8809F62C5D12576FA5F82B8331347B4C3EB720689199B383BD786F4B3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353831, "uuid": "3aea4d22-3b39-4c12-afc5-3082c8e5975c", "value": "12288:kdsIGAxshFpYiioS5vyHF+hqLhDVFzhBVBPgpfWt52wR7tZcPwopK7d5Y:3IGSs7RSidLJVF9XxTztZcPwQK7d5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353831, "uuid": "ac6b7cd1-a1f8-4068-8996-3c2ea5d39b6e", "value": 734640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353831, "uuid": "083bd5cb-d6af-4dd3-93fb-aae6090afb9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3b22b5-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353844, "uuid": "66979f12-9da5-474e-bfe5-a05540a4bd0b", "comment": "Malware payload", "value": "4aec06206344af30957541e27a1b9ece", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353844, "uuid": "18a08e95-b007-4765-bd5c-6e6ee055c763", "comment": "Malware payload", "value": "9d0ebe20868510fa59be2c822b70b8ce16e2ab872417c34b03af41eddbbd370e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353844, "uuid": "02c3ef9d-8b81-49de-b5fd-c3182485e332", "value": "T195463911FECB14F6E5031D3144BBA26F23315D068B24EBC7EB547E29F97B6A619322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353844, "uuid": "e4a388be-7272-4eb0-8744-c0448cec520f", "value": "49152:wdgLQ3fLC+623hpMLt/JejxN9Adlyavd7EybeiTieahhDqA5EJ:weLSLzpP4JeVN+dly8d7K3ayEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353844, "uuid": "75b6206f-a8ba-4946-8102-2182655a5056", "value": 5742754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353844, "uuid": "82760ea4-8092-43b2-9d3b-ebc5fc043240", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd2abad6-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353846, "uuid": "27280c7d-ac0f-48a6-9f5d-123168dd1568", "comment": "Malware payload", "value": "6775ea5f37a75af9a87dd93670a807f5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353846, "uuid": "f1f0ce09-b083-4382-9002-5f693a6dfdc1", "comment": "Malware payload", "value": "ee5c26e3c2ebb0dda8da555eb02e6eda7e9f3d8654e03b4da8e60d819bbc41c1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353846, "uuid": "995f543e-a8c6-44ac-a8c4-bb538e60c825", "value": "T1C0D43916F8808F62C5D1257AF65F86A8731347B8C3EB720699189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353846, "uuid": "fc678931-eb5f-4710-9c78-e037de4f6814", "value": "12288:CtdQu3sFZVnQAQy6MrOBSV2jgpNxDKRubQT/WkE:cQu3sRhzrOwLeubC/Wk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353846, "uuid": "2979c0cc-d596-4538-be6a-61cc20b0e003", "value": 645204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353846, "uuid": "0f887cd9-5bd6-4a90-ba84-8b0a514ab911", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dda0e650-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "3d601bf4-5221-4092-8b9f-38a4eb5cab8d", "comment": "Malware payload", "value": "70ebc77b98f919b53464d88e2e3ed86a", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "df8ab77c-a4be-4e9a-a8b6-af091620b138", "comment": "Malware payload", "value": "73fcb8d5484450ac007b5781bd2181ba3b79b867205e2035e666c1dea01465a3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353847, "uuid": "6ebe7516-2916-4daa-80ee-922d5ce33537", "value": "T197F46D88E7C2D4F1F65300F10A8FD7E21A64A21A5053F6F2EB8D2A9774727526F163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353847, "uuid": "a9e3de4c-4d2b-488c-b4a8-30cdfb3fd5b1", "value": "12288:/m453rrhHKhmGuYvdBF+VPFHXJUhxO2NAV92qeIm9PcvPyKEfs3gOLu:/mS3HhHKh3uYvdBFoZU7O2NAV9heIm90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353847, "uuid": "41cc8322-7b52-47aa-ae5d-7387c11b2ddf", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353847, "uuid": "fb8cd7bd-92a6-4eec-a798-30c22974d24e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de4ebd63-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "850a2a72-81e5-43eb-a134-3d06270f69b0", "comment": "Malware payload", "value": "a5475188af9ac7b1ca980b623b4e4c7d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "4463d94b-8186-4343-922f-eb5e43a8a4c1", "comment": "Malware payload", "value": "5feb26cfbef69a509d113420a240b62b9e107c380680fcbf4aecdadd06a5add2", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353848, "uuid": "588ddba7-8d1a-47bc-b44d-6eb2f771875a", "value": "T1B3D44A56F8809F62C5C12976F65F82A8331747B8C3DB72069A189B343FD786B4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353848, "uuid": "05dcfea3-ca93-4661-b42b-47847c6736b2", "value": "12288:iVzVzx77d6b+yGCMrvbFnggpL+ENBlkEnfQcS:MzVzx7JZTrvB1flkEfQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353848, "uuid": "7b2903fe-5ce2-4490-aa2b-2b3727f6cf36", "value": 645952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353848, "uuid": "67a417d0-d1ed-4dda-8ed5-c993d94f2d4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea65e6a-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "d26ef4cc-ea8b-4b72-b586-11e8397ad521", "comment": "Malware payload", "value": "4d9513eb8082ad2e69083d1ed4e59d6b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "05ac75ef-e658-4250-8545-672650ea9840", "comment": "Malware payload", "value": "fffddc43da73547f01603636d0fbabfd3691be159811c0758d433c338ed659c8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353848, "uuid": "2d5beff3-e540-4dd7-94a3-d467582bb0ae", "value": "T1F6058C1AB2B3F17CD01BC03047DBCAA24535F47526212E7B26C4DA353D6ADE22369F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353848, "uuid": "73cb48a1-61ff-4319-830c-84142ac52453", "value": "12288:LqWlHK6VyUL/dbHR2Z7C7NgXianQeLVvJ5PrjlRSaayAhYtHX:LqwHNkU57NgSgQeLFJ5vWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353848, "uuid": "225f9d53-6e8e-4d47-9831-c4569aece0ee", "value": 830032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353848, "uuid": "2bfcf357-1d5d-4fc3-87c7-05ca8aa68ef8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df2936ce-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353849, "uuid": "414c4f46-c107-4201-a856-0a749c39db8e", "comment": "Malware payload", "value": "baa80f1a938256e0d9d292b4aec9d2e4", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353849, "uuid": "18fa0eea-086a-4c48-9214-b6b3b411e243", "comment": "Malware payload", "value": "fc15892d0607fc7b32d289baac147d4c0a4127b118a9e581f68297cbcd2746c0", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353849, "uuid": "f3bfa7f6-1cb0-4563-9465-6e50c61bdee3", "value": "T1B0F46C223711DFA5D355C67009F3C7545AF621A20EE25486B2ACC3287E11B2E6E5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353849, "uuid": "3d3bab02-8a14-4631-9f26-fa4a998e02cf", "value": "12288:MHF9JXwR0fMgiDgI70v4HaGI+K8w2yMj+IbgpygoCAyQUQYSeOVljSr:MHFTg0x4HaGE8ec+IkAmfOVlje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353849, "uuid": "a693219a-d2f6-4291-b3eb-a6944a571776", "value": 763052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353849, "uuid": "53c7df34-2033-45ea-98d0-c83061570f82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e04fae18-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "235998bb-8c1f-4732-84a0-f79b901d74b3", "comment": "Malware payload", "value": "b1c8aa15023c656a7caf5fda630a9dce", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "49048402-6331-4b78-bfd3-5b49df32a7a8", "comment": "Malware payload", "value": "7edd58080fc861e2a949b1f33dc2256208bb87b99fb433e099d5322ada78aae5", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353851, "uuid": "49d41cc3-05a9-4920-adaf-27a5415ec8a4", "value": "T1D0F43A16F8809F62C5C1257AF65F82B8731347B4C3EB720699199B383BD786B4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353851, "uuid": "73c2f94a-f956-48fd-8c6b-d89fee5fa787", "value": "12288:rniymMIA9Yp4KCmXomQrBUqzGLp2bgp+gpYWtMj7ZIOEfzw2im:DyMIA9qzBqCLpUgx+/COEbw2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353851, "uuid": "fc465b0d-8c28-424b-996b-62889fcd5dc6", "value": 734296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353851, "uuid": "db33ccad-ee4d-489e-9ddf-6230ec7a381f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0a5d169-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353852, "uuid": "bb003197-787e-4815-bef8-75334d3261d1", "comment": "Malware payload", "value": "1e999eaa6711b58d4a881bd203b6f6e5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353852, "uuid": "b0f34876-8036-4c69-b85f-15aed0121ada", "comment": "Malware payload", "value": "3c4a1736fe93415b97cb7b8809fe58cb5693c33ddb2f1ae8cf13ebae1a69716c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353852, "uuid": "8178fc1e-b4c5-4cf4-a7da-2e27d7df4bb1", "value": "T176F45D07EF505FE7C49FCE31492EC30600EDD8D39AC2662A71FC4B8CBA992594AD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353852, "uuid": "41881582-aaf4-4b9b-8839-63a33e3bb7ce", "value": "12288:trm9tgRA3DBjW7UGyOhqYji/QnfSPx7ghqSest2Z2ndb665o7Or/+E0asy+WpLaf:0aA3DBURAAfSnwbPaN8lpB9VcN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353852, "uuid": "a3b61451-0400-4366-ad3d-4c378ff362f2", "value": 761540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353852, "uuid": "1d839050-8833-4d75-b809-59a34a192cd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e504e9d3-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "991e3151-4cc8-4c5d-9e6f-3f1bc24ed3b8", "comment": "Malware payload", "value": "85946641a8c50ca6011f60ce58ef83bf", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "4de4def1-26c2-4672-bc57-7525447f8846", "comment": "Malware payload", "value": "4a485a50aa0054b13cb36ae4e425927f43e9791f3769fd8fe458be6a2f9d2390", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "09ff6096-ebff-42d1-833e-7b25696690e8", "value": "T132C58D02FD959E2ACA2E12B3896116D82738ED446F83931B5E18FA7C3CFF2856D513", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "10c6afc4-0dd3-4e4d-a771-d8ebc3a5fd6f", "value": "24576:55d8AR93wcyUKzDMTMyetzetx2dnuNZlDHAaWjOUWxkP1IN8Gv+OA664v:2AX4DIxpEX2i/4v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353859, "uuid": "bd0ca710-f969-42ec-8125-e09d3bc62342", "value": 2556066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "26ad0f22-ba2b-4ec3-95d4-43402c57bf24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51c2b27-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "f9c21bd5-5820-4dcd-b0d4-93e9b6acd493", "comment": "Malware payload", "value": "c39f0ad10063ef1cb4559645e9a6494a", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "7ca1533a-6118-4175-865a-e57cd8d58926", "comment": "Malware payload", "value": "e08a6f374ca7935800b77c2081a8f0d4f42254d1766b1f231a367b73cb0012fa", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "0900e081-a880-4f9c-9fe7-51098df0f6eb", "value": "T18E158D2EB2B2F5BCE017C03447DBCAA24535B47522312DBB26C4DA353E66DE51369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "980db251-7edf-4999-899a-51f32ad9d3a7", "value": "12288:pL7KD+NgA7rv6fcTgdAHGIXffp/bHJ6sg9nnHyxspFAYJ7Qaydi1ucmgRHcHX:97S+Ng8YczDSnHyuFAYJv1ucBRH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353859, "uuid": "fc2e9368-5b7d-47f0-9c3e-9bfb1d4346f5", "value": 961232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "607ff64b-b3d3-43b2-8fc5-d40806d10238", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51fdfb6-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "512a8574-2e60-4a5a-806c-e51f901d474c", "comment": "Malware payload", "value": "e936d3d8f92e3de746bc28a36c14ea40", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "c52df83c-d30c-4764-ba4d-6a9f67b7d589", "comment": "Malware payload", "value": "8090ae3fb1993bfea61bfc5ae2b148d85ac742b91e356fd8479d166356d1122c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "5a4bdc92-e944-4a38-b0d7-40da81d5aca8", "value": "T1AD36FA15ADC43AE6C41D5B3894EECAD613B05D104BF14B3A26A4FAB9BC772257F078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "15ecfad6-d438-4b05-a69c-7eabf0f66da0", "value": "24576:1v/Hzp+Q3zT5lF3WR+sQVqsaUk4uxEgc2ti9GxmAmt+DENZVp7DVViPobzexiyBm:NB1WJQ21iZLiZ8CZK5EI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353859, "uuid": "1e83a8aa-bfdc-454f-a63b-d27f3848d404", "value": 5177537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353859, "uuid": "cae13364-9c18-4e12-9545-61ff0d2bee00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55e70ef-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353860, "uuid": "3c94efa9-5efa-4705-af2d-09cc4a7f88ff", "comment": "Malware payload", "value": "82f16005b7b0abc1e75cd7eff95e5863", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353860, "uuid": "566a74b4-4223-42cd-b626-825ee973ba8b", "comment": "Malware payload", "value": "d7c55d89527602ea43ce04e79c878674938aa8751ccf493a23866dac66d2e903", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353860, "uuid": "bfd83359-b00f-421a-a0d3-e661b61075f5", "value": "T135262811FECB54F6E5031E3105BBA27F63315D0A4B24EB97EB407F69E93B69218362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353860, "uuid": "b861bc7a-4848-4d86-9687-9a4797ae714e", "value": "49152:u7x/sJO5QUaZlPMorL5CsYCHs5bzLdlygh7HjCjsp01DG25E8:uRsJO5QUav8sTs5b3dlyi7DTcGsE8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353860, "uuid": "b45eece0-3e9c-4977-abe4-ac4a36c19a4e", "value": 4575394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353860, "uuid": "5e535c79-a7f4-4965-b7af-af29a4a24cc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e56a7999-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353860, "uuid": "dacc2e17-a24a-4696-9486-1ef2b576427f", "comment": "Malware payload", "value": "a08f1071df2733e5f28aac2d9f447af3", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353860, "uuid": "2b561780-540d-4ce6-8377-1a7302cb87c5", "comment": "Malware payload", "value": "171caf1b5d70c1623e6e275f88aeb2505b5d284b4d07b95a4299ec1df2a8b543", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353860, "uuid": "2333b313-66dd-428c-91b7-b33361bbebd7", "value": "T1F06639176F18E70EE624223458B1CA846B2A0C5542D7A917B391F31CB9F30BC9DAED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353860, "uuid": "237a021f-7050-455e-b0ef-15f120e5d005", "value": "49152:gG7JU0SDlj3x+adsDdcaSZzheugxgE6K5PmjYNxi/WdjZZEI9bSYhjr5HH4t5EJ:bkMxWoDn4jEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353860, "uuid": "2cc101fb-ad66-4f51-bf5d-cef3524c1e42", "value": 6553793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353860, "uuid": "0a449530-0d83-4ad9-9725-670dc6d1c4d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8585dea-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353865, "uuid": "2a92381b-5001-454b-85bd-842d84101ec7", "comment": "Malware payload", "value": "f984b01a82322ca2e4791fbc4f88b6b3", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353865, "uuid": "c5b77e3f-1bfc-4013-82cb-0192d0c89a4c", "comment": "Malware payload", "value": "88abbb13069a2efbcffd34e7fbd9d23989c968eafd37dc660536d5f22a749369", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353865, "uuid": "c850d046-dfe9-4399-9454-b77d9930c236", "value": "T1CBC55B19BC5C2812D5CE76726E7212C43339BC485F81D33BAA18B77C6AF27988F176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353865, "uuid": "6140f6f5-4bfd-4ba8-b814-2e398518cc6d", "value": "24576:Znyvijm653EO1+wL5S0RBE4yojG3DFXPAZ0dwzGwHkkgRW0l6dqp9uFYpPtmseH:Tjm62OYo8oj8FnerWGY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353865, "uuid": "4a7b4748-0ba0-41f8-b772-7a81263938a4", "value": 2687138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353865, "uuid": "47985bd7-05c3-4c53-9425-6dee2dcf8713", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee6e7df4-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353875, "uuid": "482960c2-0bd0-4789-ae11-84b9f96a892f", "comment": "Malware payload", "value": "89ed8f6c928c085c5fb91a2a17ea5cda", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353875, "uuid": "b457698f-ea4e-4cd8-bf72-9edf9936f282", "comment": "Malware payload", "value": "a4768df61d31d51eba5c1693edd29ee0f687f34a856a6bae580ca745f06dc2f7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353875, "uuid": "223bdca1-403b-4e53-96de-8547a37821de", "value": "T17ED49D29F4047B17C8979275848FE028736BB2440762770A3846E6797E83BBDAF1D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353875, "uuid": "f1bbad6d-98f3-4a57-9d7d-c9fd75f1f3e3", "value": "12288:Wpb+ivGQUT0eEApt4MAJv9fGD353Hw5spDP+JgjtHZls:Wpb++GL0eEApPAtVGD53tUgjxZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353875, "uuid": "e0a674d6-fe0b-418b-ae81-8dd424b8221b", "value": 654136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353875, "uuid": "0d862172-1fb2-4ca6-ac0d-be210bcd1a77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efc7bd53-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353877, "uuid": "d5e65bd4-75b9-48a6-be97-30c9bbc7a3ad", "comment": "Malware payload", "value": "004ef652a8adc3a6797a1bfba237e59b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353877, "uuid": "d740da71-1978-476e-b1ba-9e58c57ef76a", "comment": "Malware payload", "value": "5dbcc320db818d105b751285b40f1ed46400c5950d400323d2f97826338fa67f", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353877, "uuid": "996c74c3-b14c-4d35-8542-7c2cc875f133", "value": "T19FD55B80FB489226E90B0F338CA30BB8B3515D46C6E4856F8709B36F15B15FB598FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353877, "uuid": "ea1ad1d9-ecb3-4f3d-a7ed-37e1de331a3a", "value": "24576:2Zmn8reCDWIIIEEGW8wWUFi0+PnsxPxori9sOY1D5LUVV7+3:2eCDWIIIJGWx1nPxori9sOY3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353877, "uuid": "eb04dbf1-32cf-4399-b264-6eafff892a9d", "value": 2818210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353877, "uuid": "24fe4b0a-0782-4fc6-99c4-fc8820c630ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f27b7c98-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "30018573-9cb5-4062-a6e3-8e418b84a595", "comment": "Malware payload", "value": "4794a65a31c374fe96c428de70ec94fd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "905f45db-533e-4e27-8010-473364315614", "comment": "Malware payload", "value": "a648d3198df74d259e9b44449ffebabd1a1a2d8c00fe30aebcc691d5352bf3f8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353882, "uuid": "20347bad-2009-4681-8d9f-0d2468ab4f97", "value": "T1E0466C81FB48A125D95A0E7288730F70B3512D46D2E5EA5F0309F36F15B26F7AA4FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353882, "uuid": "04a0e147-dcb5-4110-96ba-db5a32857fef", "value": "49152:+izmPrxsdguczNAGQ0Ji9x/uKbMnTubOssdek1slHH4t5Eh:Mqdg7zCGt3TT51sln4jEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353882, "uuid": "0316947a-616c-4526-8988-8f42eb5e45da", "value": 5767330, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353882, "uuid": "8d0931aa-e37c-42c6-a263-f4a70dd3a829", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2b300a7-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "53c3bac1-56a3-4c2f-a8e8-9d64e93b8526", "comment": "Malware payload", "value": "067d3f780eb9d217758eb1d76db445bc", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "431e5e6e-2908-4105-85b9-bd7ed26484f7", "comment": "Malware payload", "value": "0d07f7160f095100c05557cf3a6514c463caeb6d04bf3d4ff0ca53a76e7a38db", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353882, "uuid": "b8306788-7664-4873-8e18-462d15ec73b6", "value": "T149F4BE29F8446B57C49B9234808FE018737AB244139237063846DA7D7E82BBDAF5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353882, "uuid": "fa865060-e2ca-428f-9cf6-8e227d308a1e", "value": "12288:mv1HMLvK7+gTHgBlLQSBTrpXVnXCltZhxikP7ptvlJJWw54VVxGAKLsF76SUPa:mv1HIK7+wHgBmSBTVXNSltdikPlLJJ8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353882, "uuid": "36011ea5-4173-47d5-ab07-887fa277f0fb", "value": 745064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353882, "uuid": "25150217-6766-4db8-b169-8f0f69e14354", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f372ea74-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "4c162270-8bd6-4d40-9254-7c7e03c6212f", "comment": "Malware payload", "value": "47f69ff791dcb5d5ac2b22a851e4e6c9", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "abb38652-49ca-4757-a94f-ee45459a7d31", "comment": "Malware payload", "value": "dcad622636725b937ea3519db364766f3b18a544d08910525099914dc10381c9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353883, "uuid": "6731d7a4-6594-4dd5-bda1-807c1d3ad35a", "value": "T1B2056B223711CF6AD355D67005F3C7505AE520A31EE2548AB26CC3287E6162E6E6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353883, "uuid": "c48a4fd4-4717-4575-a110-72530897b7c7", "value": "12288:iUQMxs+pZB4MW9+iLV/tg4nAGrPsJAq/B/YgpqLMJjovPgcVg38Owy7cb:qn+poM0g4nAGDsr/B/S4jXcO38Owy7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353883, "uuid": "bb58257d-6751-4b60-807c-38f1c617117d", "value": 837216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353883, "uuid": "19080852-7c34-49de-b5eb-547445ae28fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9978f28-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "bb808063-374e-44db-a57b-dffc7ee40cea", "comment": "Malware payload", "value": "73bc93d5d6d8be6106e7f126cad23c21", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "9e1931a9-6c2c-4de0-aa55-56790d7aa953", "comment": "Malware payload", "value": "440fa88d7c73f6a974cdb8f4e4faf3a00d79828961c3cf44c2522e3b6b9b76df", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353894, "uuid": "cd900336-899c-46b4-96a2-ca6269053900", "value": "T1D8166C15FC5D6863C5CD7A712F761298323DBC885F81C32B6608BB3DAAF23548F526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353894, "uuid": "fb06c844-b69b-41b5-8821-94f9bcbd7f1a", "value": "24576:5Skrlv1D2pezVxNrWzMclBej3P4ZCQ672oUsWwDxAdQYtmTwswNxNt/ovP+AoS9Z:5v1qkzgCPzQckNt/oXTOjsmAokaLx5Ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353894, "uuid": "4f2bc938-ce7b-48da-8fa0-287be34ec873", "value": 4260002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353894, "uuid": "052b4324-ee23-4ec4-96d4-e82c7f144b34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9cd1e35-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "201dcc91-e1d2-40b6-a739-de70a2457eb8", "comment": "Malware payload", "value": "d9e8c864e5ff6e6d7cdfc6ceee6b8e92", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "5202f272-0d9d-4280-b2f0-dca5eb97bcb7", "comment": "Malware payload", "value": "36215157d96aac7dac363433aea90a6ce1b3b4316ea7886806ecb9646ca4b606", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353894, "uuid": "32c6defb-80e8-4842-9fbf-b522b3d7d105", "value": "T1E8F46D89EBC2D4F1F65301F20A8FD7E20564921A5053F6F2E78C2A977472B622E173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353894, "uuid": "1b0ca27e-7bf4-4247-9526-0e0f00b49bcf", "value": "12288:3fhE2Kmh3NhPpj2yE3LAGP5M7cG4e+4vL/l9DHjH4mHvBfPyh7Bd6PB7gLu:3fa2Ph3NhBj2rLAGbG4e+OLt93H4mHvj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353894, "uuid": "5dfa5054-191f-4ee8-9a9d-c6d724c5f121", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353894, "uuid": "d0ecec5a-40e1-4e27-8da0-decd3d8aff58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb15f09a-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353896, "uuid": "ba80d1db-9b88-4ca9-a9ae-f7e881b522d1", "comment": "Malware payload", "value": "39b3cbd727f439ff93d6374c3f25f58c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353896, "uuid": "45c25a9f-57e0-4f9f-9879-59aa7b6076bf", "comment": "Malware payload", "value": "b778e9f52319e6450702ed882e72c54803af7cb6289b6ee8ef8d74e1a63c9edf", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353896, "uuid": "d34e9301-3e28-4160-a2cb-1c0694f6bfd6", "value": "T11B058D9EFA5E3C47E2DBE33D9F4E83B1A22BB150C21351533581432CA4C69DD8BB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353896, "uuid": "a81db6db-f190-40d1-9c6a-f1ebd4d5ce14", "value": "12288:Je2flvB7/D2VNnwmNTyECCrLxKwjzvXVNEuXw5lltxOWXGI2FG9+26H:JDfj2VNnwoXCCVKqXwLpGI2c9+26", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353896, "uuid": "fd01c449-c0d8-44a4-a2ab-106512ea950b", "value": 865960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353896, "uuid": "bee0cb48-5e0f-4a58-8af2-04825782f3e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe4fbfec-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353902, "uuid": "96f1cc55-fbba-4c4b-b7d7-901a6fb9bd12", "comment": "Malware payload", "value": "c25a09e5e2b2258107187c651178f4b1", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353902, "uuid": "a8b204d7-3886-445a-8c24-961357229f30", "comment": "Malware payload", "value": "b5c514f90d3cc7b3d6e32b0f6e83852b86a5d5ef81d7388f39ba0fc5e1f6d8a2", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353902, "uuid": "ca7ed4e1-909f-4af4-aa62-e0bfeaa0f39d", "value": "T14466F815ADC53BE6C81D4B3445EACA9612B45D104EF2463A26A4FBADBC772287F07C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353902, "uuid": "f2bdf7c2-e993-4db6-b3bd-171b6a4fb0d6", "value": "49152:Nz4KDlkJ3FJ9YUZ4eDXTZ8J/zSZWhQ3XwJhlpjWr3L5EH:injhWh8r3dEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353902, "uuid": "0b629c59-ab27-4c35-9f80-fe7b638b0be7", "value": 6553793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353902, "uuid": "64cf194e-447a-405b-87cb-87e2a5caeb95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0682a658-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "688aa98e-7a89-490a-a17f-1130e266b5b5", "comment": "Malware payload", "value": "951aa49d1a84afa262cbc8e025423222", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "7aa0b686-1fcc-43ac-af25-c42f3fab3f14", "comment": "Malware payload", "value": "18be83358d69d824bcbb6c5979ecac3199c3641890263f0f68f32ec21ed135d4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353915, "uuid": "e2a761ed-e598-4281-ab30-b8b3c644c221", "value": "T176055B42FB1C4523C9470EF1293F5395F7257A4341F9922A370E9B672621E3ADAC37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353915, "uuid": "97055ba7-b140-4bbd-972a-db52ede11459", "value": "24576:ZByXx/K8PmDGtOnqmr5KxwZdbgsv6K25D:ZByXxNmDjn99KGjbgk6p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353915, "uuid": "e7cd1cd8-92c6-4d32-a4f1-8800413dd4cd", "value": 857692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353915, "uuid": "f4e410d5-93aa-4adf-96f3-71037b39a0d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06fd6e4d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "df684710-6d19-467f-a7fb-67a208a7d777", "comment": "Malware payload", "value": "29f4e1bf51849f581bb124d9b7656eb2", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "153f6155-5927-4948-8d75-b88081aadfa5", "comment": "Malware payload", "value": "37b220a8bd543f1f47543b0bbe0821d974f90d18ea28925c915ae3cdfd9e6684", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353916, "uuid": "53172715-1b16-4b02-9eb8-3f8d568f0cab", "value": "T181F46C5BFE6E3843E2D6D33E9B4A83B1A22BB190D32350937581432C94C66DDCFB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353916, "uuid": "c9b1cf8f-b54b-4b93-88f8-972838bfddab", "value": "12288:6fsvv1dLvFE5ORhgHfSBtplnlPwZYw50Tx+y/y6kgVP:60Tm5t/wtT6Z6N/9kgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353916, "uuid": "167d975d-6487-4a56-87e5-bf6408958994", "value": 787640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353916, "uuid": "1443ed60-df92-493a-a860-989a2503260d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0713077d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "72f5cee5-9cde-4dda-8f69-4f43ba89e937", "comment": "Malware payload", "value": "0df53086593fce119a4c22cf39791476", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "f9644fc1-7643-4187-b2fa-70d11ffaaa3b", "comment": "Malware payload", "value": "d4aaa85ae97ba1761358fabf4fd975ef748fe70d2ef392b6150e21ac770dd747", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353916, "uuid": "3ea1a814-9a2a-42e9-90af-1c685191096b", "value": "T155056B227721DF65D355D67009F3C7519AE621A31EE24086B26CC3287E2062D6E6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353916, "uuid": "6cd83c1c-a852-44e9-85c4-45d29808e87f", "value": "12288:ydYzBLjIyIZrCHoKKp4c1GflUV+1zvy6gp9LMnfjmXsrZuRu0Y:yQBLIp4c1GdUqzvyhSfy+ZuRuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353916, "uuid": "166b904a-3824-4784-93be-978f27b0d134", "value": 836952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353916, "uuid": "6bbd0df4-0d17-4a80-8ec8-c642c8819b3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07cf54d4-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353917, "uuid": "38558a6f-0a6d-4359-ad78-fca2460cda7a", "comment": "Malware payload", "value": "45faaed5807dd26cde8da0ffdce325fa", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353917, "uuid": "90ec5d72-23b0-40c3-a6b3-149f905fb7aa", "comment": "Malware payload", "value": "fd4571baee0a51c1916a0552fd3ae124ed3e0251abef9b1f33863a98a6213d4c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353917, "uuid": "854d3d2d-605e-4c8c-a3c8-a21b4cff47ab", "value": "T135266C90FB48A166D94A0B364CB30B70B3911E45C6E4996F030AF72F56B26FB590FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353917, "uuid": "e25e0c6b-8730-4d30-88b4-d15077910677", "value": "49152:lezYo9vFbor0tvQ6cvgzO8tHK6ZCWGEGnTUFK1/wgOnt5EA:aNbptvQ6cIzO8tHHHGEGnT1dwgQjEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353917, "uuid": "becf716e-7f0e-41e6-a629-1ef95354aa35", "value": 4522146, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353917, "uuid": "8952fd2f-231b-45ea-937e-7cfa5e339cf2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e6eedf7-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "1f5f45b4-55dc-45fa-8657-8e24dec34616", "comment": "Malware payload", "value": "d38fcdeb00bb49871564d04b4a3612ca", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "65e57a1f-1a17-48e6-85bd-783317655672", "comment": "Malware payload", "value": "23e25a1d55c9a6c99368798f937d47561d30a401ad98841f634e5e4c4383c5f1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "1cf1655b-fc22-43dc-b8d7-1d86ad2d3ee9", "value": "T1D7D5F814ADC43FE6C81D5F3854EA8A9613B08D144AF2976725A4FAAD7C7B2347F438", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "c842d8ea-61e8-4f3b-b7ed-e6900f3427fc", "value": "24576:vwqy5sQJLTN7a6I06K+CN9oWE/N6Bd/m0KyTJDQ0UGDU:vwRhxW6QPON+9l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353929, "uuid": "2e82dc8f-3aa5-4fee-b6c5-fb50dbc5f072", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "0c48a787-4734-4503-8215-69881706acaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eaf1d6d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "c854466d-cc11-4441-9144-b3d0d37a1448", "comment": "Malware payload", "value": "181fe422fcdc46185697ab1cde5cbf97", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "61e8a8e1-3b90-45ff-b672-a8b7d11b6593", "comment": "Malware payload", "value": "fea62aa379253fc60ad0a248c358d2569f56e5eec417102f41a45becd876c58d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "d36a8995-46a2-4e31-a892-f24f0936bae9", "value": "T118F4AE29F8087B17C4D75274808FE018737AA244179637452846EABD7D82BBEAF1F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "8c6af4fb-715b-45e8-b9f1-49a0edc4ccd9", "value": "12288:1SM2s+GFH0kJWwsl5QZvWVoEiGd013fx4tWBLDNhjw5DVV5ZrxaZWA1w+afh:1r2s+GhlJal5QZvW6EBd0JfxuQNh0jZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353929, "uuid": "8f56d396-d577-4363-8697-436ad8a2f301", "value": 745984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "4ac10234-eebf-44eb-bd9c-fa17b4d91569", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ec75aa3-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "8efab876-f5cd-47aa-a85d-9f3fe8040b9d", "comment": "Malware payload", "value": "c603a816a5f9a6a8c2f471a19c0315dd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "b5061f86-f443-4e28-a9ee-d364b548e886", "comment": "Malware payload", "value": "0a65892df4903823e00869e42a58403ef4e125bcb55838016e3cd227fb5f9635", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "1dc7c8e7-65b9-445e-b52b-fb8925140963", "value": "T137368D0AFD509F5ACA3C41B288A116D42734FC441F8397575A24F63CBEBE6C9AE913", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "05654ffd-4441-41c4-8b0c-1632a9777ad9", "value": "49152:XX0oVe4ldWdV0GWSjAbeGVwFctjR8m25ET:XPPluhMbtNwET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353929, "uuid": "49554d64-fc0c-46e7-97c3-b32e9fb5834a", "value": 5243042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "cd235a95-02f0-4786-b098-9802d55c9e74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "173ffbb9-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353943, "uuid": "f6b51f03-600c-41e2-ab5a-85f1983bcc78", "comment": "Malware payload", "value": "e7a5a2202b34b354e4483295eb23fb28", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353943, "uuid": "37ede7ba-173e-439d-af9c-ccc1b2ec06ca", "comment": "Malware payload", "value": "d8bd8a92a39cea235cd69fb6116fe52d831523f8b9dcaa3ee278b7f2cb254ef6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353943, "uuid": "f7e69e0d-fbee-4407-88d6-4aa79e80d7ba", "value": "T1CF3628137F58E71EE124213458B2CB9867291C9602D7AA17B386F319E9F30AD4D6ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353943, "uuid": "792087ba-25f1-44ea-9606-b8bc7c60b8a0", "value": "49152:wrc9V5qJs2Nyk5HAv234jw0tE1mawfupaYfMoysfnt5ET:NMVBvjET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353943, "uuid": "589bd63a-dc01-4a6c-9753-38b2ccfc5fdb", "value": 5177537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353943, "uuid": "297d07e0-5358-480f-ab48-36b49feb3b9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a538f63-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "54448767-5ea0-4da3-abc9-5ccca8b3f6cf", "comment": "Malware payload", "value": "b23513e1404099f107337c161983fa36", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "cecdce8d-f520-4a60-9f36-7a549e39c83c", "comment": "Malware payload", "value": "3f306fe2cac1495a88ca47b341cf12760c7339b7e4f52b25aa6c2241cf8eac17", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353949, "uuid": "835a00a9-5d29-48c6-a054-62098484e93c", "value": "T135F45C227721DF66D355C67005F3C6914AF624A20EE35486B26CC3287E2066E6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353949, "uuid": "d0185d8e-6ffb-4dab-b1cc-a6672b74fed5", "value": "12288:b/P96/1hnLBBM+4ZlGaP0g471u8SJBWJ5EUcgphg1k/CPBmtv9VcNFF:b/PC1D4ZlGET40WJ5ErkHB9VcNL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353949, "uuid": "10abee48-8c7d-471f-a148-0242afc7f864", "value": 761540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353949, "uuid": "69294d51-4a7f-478b-834c-0aaa2a18646c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1edff25e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "7d358602-9998-444e-b7c3-1607be072fc4", "comment": "Malware payload", "value": "93f8ea9e754d554c98e97959b7b77ffd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "33c49214-25ef-4130-a1fd-e9b0a3bc3784", "comment": "Malware payload", "value": "e2744e23005b0736a5b8a1941a8481fda59da99b110cd943abfcf9b46ff8f23d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353956, "uuid": "5ac978fb-d8d2-4d25-a638-17af1216dcde", "value": "T1E1168C17FEA0AF56CA3D527688A106842738FC501F83AB474A14F33CACBFA955D913", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353956, "uuid": "723551e0-7d2e-4708-b9f9-a5e67b72bc03", "value": "49152:+vx1cJbz7JjUCb4cAXhEihVMFZrn965E6:+vxQeCUhE44iE6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353956, "uuid": "b23a9132-1078-43a0-94ca-8668cdfbd888", "value": 4128930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353956, "uuid": "675bb49c-92dc-4856-ad59-612536560789", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ee063ce-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "b2651d65-4928-4033-aac4-990d84b42f4f", "comment": "Malware payload", "value": "8a78ca719bced5468c77f141897e9832", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "9f9a8376-9ad2-4984-a6db-27dbe13248bf", "comment": "Malware payload", "value": "1211e8942ecc2dc8f32823e310223957849acbd243d7b9727168fa4dcd24630a", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353956, "uuid": "d02ad22a-739e-4ee5-b605-d6efa605fd7f", "value": "T17A155A42FB1C4523C9470EF1593F53D6F7257A4245F8922A370EAB672621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353956, "uuid": "4161c27b-bd99-4f60-b944-006f3744ec05", "value": "24576:chE8twFOvkUwTqEbV8ipIpyhx5lQazrR1Uttx:c28tww8VuEbLp8yhhQazrR1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353956, "uuid": "62a3bd83-4c2a-4a68-b847-3d7e17f6705e", "value": 928380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353956, "uuid": "bdab5ff1-73bd-4689-906b-d5f868075f81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3651e569-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775353995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353995, "uuid": "82d85211-8725-45b6-b41c-b3b4bd686a7f", "comment": "Malware payload", "value": "4b9e1da725c0680c014ecadc4b442926", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353995, "uuid": "ffb41c18-a307-4542-bcfc-f84b24a9fe7d", "comment": "Malware payload", "value": "870a64a45590639999060dfb605c58c7d67ecfb2b23d18618ed68cc271695b86", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353995, "uuid": "c75a2374-c680-441c-97e4-ae6f236f972b", "value": "T125D43916F8809F62C5D0257AFA5F82A8731747B8C3DB720699189B343BD786B4F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353995, "uuid": "ec5ea05f-7cf2-4a59-912c-9cf5b2869c54", "value": "12288:rxc8R81vX/Ic0nolumivq/tiRkWOgpg+RdB0VF8EGiLcJ:28R81vvK21ivotiRH/0z8E5Lc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353995, "uuid": "20138d39-53bf-4b83-8b9a-b3f2c4fa2c9c", "value": 645616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353995, "uuid": "30c5ca4d-1768-40c1-9447-819cf01813eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c21ce2d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354005, "uuid": "60ff9221-21ce-49b7-a0e7-b9b7bf58f5b6", "comment": "Malware payload", "value": "a6617ee7655c82ca9872280b51dc899c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354005, "uuid": "0fd92ded-7d3a-4af0-91df-04e14e048b8b", "comment": "Malware payload", "value": "913ff105a6c8e55b950e7a45215cae93a1e1fbe2c44e2e6077836c7000a3d056", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354005, "uuid": "13b7dacb-d46b-4f76-8e1d-b40dd1a9f19c", "value": "T112F45C99EBC2D4F1F65300F10A8FD7E20964921A5013F6F6EB8D2A977472B522F173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354005, "uuid": "580e2a2d-97eb-4662-862f-c07ff29bb51b", "value": "12288:M6P2f0MshmThG2/UsYKajijprHi2/Sk6ZEs7pEXfBmO+66PyEjeBp8HaLu:bP2cMshmThF/UsYKajijxKk6E+pifBme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354005, "uuid": "371e42fc-3910-4300-979a-2468161b48fc", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354005, "uuid": "1e4e6fc0-804a-4774-8eb2-a2dfb97ec583", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c4a7bf2-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "6c648e7a-460f-4b16-bcb0-5eb7158adf0f", "comment": "Malware payload", "value": "1306443f0315bfa50c14c658e96e2dd2", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "116cde82-71dc-45b4-9fc9-8cc8bd9be83b", "comment": "Malware payload", "value": "508f04e514c68443f88636fa0d88f54ed15c1a4099430f0b5b2768c618e42970", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "00d98bdf-b97c-44a8-ae5a-bb42bfe4d13f", "value": "T150F46C5BFE6E3843E2D6D33E9B4A83B0A22BB190D32351937582432C94C6AEDCF715", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "08aa04c1-590f-4430-8f3a-c344d1879dfd", "value": "12288:8bBvLSvqfTrOesq94Td1B3kJBZMNqgzw50TL0AvJBGWg9y:CU0rpjoF3qBZ6T0S8Wg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354006, "uuid": "573c1a5f-4004-4caf-aa93-36d11a0496b9", "value": 787080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "a300017d-8ded-434f-b480-d9e766f30f2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c63a5aa-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "ec927ad4-f644-44f6-ac9a-5d98999a3937", "comment": "Malware payload", "value": "4f5fb8b866ea1299555b8559acfed3db", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "a548b3db-c561-4ed7-ab0b-67dd19e697be", "comment": "Malware payload", "value": "7f88b0819d638da0081aa466b633c40c01ee250fb4a3fbd8a16b33d6ea5b9f82", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "bb7ffa15-2f66-41df-b287-8fb9f5979410", "value": "T11ED43916F8809F62C5D0257AF65F86A8731747B8C3DB72068A189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "080bd464-7dce-4dac-8505-01aea0d1c60e", "value": "12288:7EcBMLJQNc0aMoe081BuxFy/QZgpl+ha/nqFvBcewQcKm:AcBML2HKet1Y7yCgnEvBcebcK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354006, "uuid": "0ddbe683-cc87-48e4-a3ab-31b149f71cb1", "value": 645276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "93d81b89-89fc-49e5-83fc-accc6aa04948", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c77c484-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "c113356e-e1f4-4725-9f07-396e2cbfb599", "comment": "Malware payload", "value": "2c13017694d8e2063ebdc32b35f18f3e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "56b6133a-5128-42f3-8c76-442e40e98f0e", "comment": "Malware payload", "value": "236abc31c6affca696661e7f6af17fb7a7abb504cd4d6158dc1797a344e32af6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "365c7188-3d24-4dd5-b271-302b4194cc09", "value": "T14ED43956F8808F62C5D1257AF65F82A8331747B9C3DB720689189B383BD786B4F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "1b99945f-af33-49b7-a6ae-3c8eb59b1dd1", "value": "12288:9QkNS05U8TroYjOmwstY9dmKgpT+IrxQbM2/G7bGbkGcC:OkNS05x+3stKQ7lQwTbGAGc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354006, "uuid": "1413cc0a-29db-4841-aa40-92d3216d6ae8", "value": 650980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354006, "uuid": "b12ecad9-3122-45f5-83c6-edb1732c4e3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cf98354-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "d2b15e56-3384-4967-862a-583d7d85fe27", "comment": "Malware payload", "value": "9b56ea449389e7cf39de5aa1e6e21caf", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "bfa57d66-0827-48bd-84bf-44f784370bfd", "comment": "Malware payload", "value": "9a01e5d08aa005af35245f7915c75068d96b46c8f116a31fd3e669d202251dff", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "734829b7-2f41-44bf-910f-8de269f799af", "value": "T1F2058D2AB2B3F17CD11BC03407DBCAA14535F47526222E7B27C4DA353E66CE22369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "4698a45a-8a18-41db-bf14-027bd261fc7f", "value": "12288:2hGfFoyPPBRdVHxsAFeNNgSP7RK3JTRHRV61+ooc6NayV19qHX:2cfFLPPfeNNgqdUJfVwzw9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354007, "uuid": "178badca-e22a-43cc-8151-fe1b6bd05103", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "33b83a98-a770-4857-b225-c9a2d26ffbff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0ec24e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "d44be462-a80a-40ca-9cca-0f5e6556807b", "comment": "Malware payload", "value": "0db9d88d86cf0e8512643172711dc2d2", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "c7be9e67-1447-4a71-9810-9bdfa33ddb51", "comment": "Malware payload", "value": "b169beb7a39d13a62193abef5aabf17c0573e01d5bb2bd9ed8a7e451eff07eae", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "f930de0a-2732-441c-b214-c721538c3046", "value": "T1D9F46C5BFD6E3C43E2D7D37E9B4A83B0622BB190D32350937581432CA4C6AADCF616", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "c4aa18c6-a1e9-417e-a317-ff70f70a833f", "value": "12288:CBavSavk0Kav702WINIWTxeAcojA2fw5l9kJiPjaNn9L:mx4v7vNZ9eDqUjen9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354007, "uuid": "e68f00c0-fb40-427d-addd-d33fb8997fea", "value": 788216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "d62dd91f-411a-47fb-9d4e-d85f5470e38e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d1072d1-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "1a6a2556-14b9-4522-8f32-8a144efe786a", "comment": "Malware payload", "value": "8e6bc8a540a9a0a32cc7d0c12edaf8d0", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "b241e4dc-d17f-4df9-a7af-bd75b922776a", "comment": "Malware payload", "value": "3d1b4760af9b65422f018516c52d8229b55c67f8de34d616502f51c4396dc3c4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "78c9f91e-0180-4a41-9f4c-2b55d383962f", "value": "T15EF47D88EBC2D4F1F65301F10A8FD7F21A24A21A5053F7F2EB8C2A5774727526E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "c1bf372a-9b1a-4781-959f-10ed3a7b3153", "value": "12288:pQGJGDJ6hBLh3+ctnIP74NeuneHk8vo65f3mZQRsGPyEjdkWbTfnLu:2GQDJ6hBLhOctnIt6eE8voqf3mZQRTk8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354007, "uuid": "2e049dfb-e138-4c26-8a2b-b884e01c7fdd", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "e428ce12-8552-49b6-a7f7-4592f0b67654", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d43c4eb-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "adc3e842-2795-4fcb-a631-7db4bbcf9ffd", "comment": "Malware payload", "value": "5c51a7866b1cf3dec5eb360e7e6bd81d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "e618f7f4-4942-4385-b926-1da6d4b377b6", "comment": "Malware payload", "value": "e62dd41d3c9083bf459ebb71cf332e011708ba14e76e9ea55ee1f13ece7a56d9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "0321142e-c960-4e38-8816-b2e110fa3df3", "value": "T1B2A52A11EDCB18F2E9032E3109ABA2AF27354D054F31EBD7D6447A7DFAB769508322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "47d77c75-4d83-4ca4-8335-e218b5a48455", "value": "24576:0/y4pRApt7NCP/oHop4eo861uwAjhA6/bqgFFLkNRs6hXZYNfapwxjsVAvbsh3eI:8gnCYIO2PjdoNRsF0VswYAF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354007, "uuid": "4612c964-01d8-4102-a5e5-5ca9849d52fb", "value": 2187426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354007, "uuid": "c86b8301-846d-4f75-8730-06223663ebbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3db8b40b-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "66a9d4e4-04e7-4ae2-94a2-da7cd7b3fbe3", "comment": "Malware payload", "value": "4361a46836352dfaf5adaa28f44347c0", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "94caa9e3-25c4-4be0-b239-656b46d5b9dd", "comment": "Malware payload", "value": "418e9d582d3ec7449086f0e0c3c331531918d11088611db7b7466943471443ab", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "fc9a81fb-9723-4423-8e8f-8252f1bf65be", "value": "T193057D2EB2B2F17CD01BC03047DBCAA25531F47526212E7B26C4DA353E66DE22369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "f6b20659-ad70-48b5-92be-28728802d8b3", "value": "12288:GKwpxmuhId8HAv8TNgwoA/xOi5X3sJ+WVb9LTay2M9SIHXt37:TwTmINgz+0aX8J/XLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "8d55192d-934f-4fda-8bf7-0c1e25e69c35", "value": 830232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "448cbe50-1dfa-48be-ae63-3b52a7d3ff23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3db92fa5-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "e865cb4d-deed-4bff-a394-19f37355797e", "comment": "Malware payload", "value": "f659d0d9d78a4fe96ab409fbac19d67e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "e852d9a4-23e5-4c20-bf8d-86978b8e9b6e", "comment": "Malware payload", "value": "85aa433ad277dee063d59e4aa08108538c4290d4f550122c35eb3b111f4553e1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "09bc6160-d654-4f1a-b0d4-a2bd2568089c", "value": "T15ED4AD29F8447B07C8979274848FE418736AB2851752370A3846E6BD3D83BBDAF1D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "6206fdfe-fce9-43b5-a26d-e2dfc0d1c27f", "value": "12288:wiK+zj7b72LT9eGKdt/w7mSplcg46MPw53po/hK+QlcEklU:wiK+37ba9eGutI7ZrJ46MT/QNlJkl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "28513ae1-32ef-4ab2-bf31-8c44fa16226f", "value": 654128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "36670f91-b5c7-4453-a5f7-03179b9aed87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3db97346-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "876ce037-726d-4916-b266-b959c1c19d2e", "comment": "Malware payload", "value": "48ace58e5992e0cda4df94aae3003f49", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "99f625fe-8b57-4b40-b78e-4ed54d178201", "comment": "Malware payload", "value": "ce43747daeb30596a6be213f61e1b4e1a4641ac2f7a42074591f661114b8dfa1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "9097b219-058d-4d87-9b39-cee977042375", "value": "T18DD43916F8809F62C5D1257AF65F82A8331747B8C3DB72068A199B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "88a5501e-cd44-49f3-9d7f-e4440791efe7", "value": "12288:dVfCgex65bOynTBmDxBRYSOgpg+hIuleDHcKs:ffCgeoIyBIxByEJle7cK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "3e0863d2-0759-4c91-b918-fb60ac164735", "value": 640464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "7802fd55-b4fe-4680-968d-828ccc31fe2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ddcc71a-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "8bf54aed-da5f-47e8-9aef-328253335556", "comment": "Malware payload", "value": "716a0ec0cc0353610c5344ad34788e8a", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "54b0aa48-b49a-4b7c-8456-886b6e8aeda2", "comment": "Malware payload", "value": "cfdc40f3c1206a846eae6e48f49df6e56392c552a59cc6095fc6e5166fb594bd", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "14b66211-e90b-4f80-ae61-3003c20d12a6", "value": "T126F46B5BFD6E3C43E2D6D37E9B4A83B0622BB190C32350937581432C95C6AADCFB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "cd4f3c95-b150-49bb-b138-61726d5cd914", "value": "12288:7LCvegV8B/XLP5lJv1XyxZc58gaKKFW5w50T5zzuDtGwx91:/TzPBlybcd+W3UYwx9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "5de998ad-27fb-4349-9fdb-355e1cb2e8e0", "value": 787624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "b40d64df-8989-47d2-a827-918bf8e6b03f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dde97e2-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "347efe03-d639-4128-8d54-92117dacfaf7", "comment": "Malware payload", "value": "4e8bd1652c871ac5b67d92524137a7ab", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "708e17f5-19c9-4e14-b4ae-cbfd8985daf8", "comment": "Malware payload", "value": "6ebcb4f2998a1a7aee92284dbf62a96fa0f897ed91ff262af6f43532798887b4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "64e0f8e2-ccd7-41db-9295-4fd06f8e4eac", "value": "T1B4F46D98E7C294E1F66300F14A8FD7F2196492165053F6F2EB8C2A9774727522F1B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "c1ce575e-d810-4220-bce0-ec7e1a744f76", "value": "12288:tXsIDg1haKh4ARTFrujieT6oO/xs56Q/y6IEGLlmhhi0PyuCRHBLLu:tXNDg1haKhTRTFruji1JsIQ/y6IjLlmW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "a3d877b0-e150-4453-981d-8fbcbaa9ae9d", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "e1a4cf04-6e12-4352-b52f-861a0438aba4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3df56f04-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "6825ea7e-3dfc-4e1e-b14e-b60b392ae9e9", "comment": "Malware payload", "value": "abe9bcc47d3645f1d7e3d8e7d8ebae19", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "7b7b864c-497e-43ec-b274-cabad853f7bb", "comment": "Malware payload", "value": "c84ce7e7c8c4de561ae99a875c42d81674532ed34dde6078e0c599fdda5cf5ce", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "3c379472-7538-4b83-89ec-31f03798a490", "value": "T1A8D4AD29F9047B07C89B8274848FE024736BB2845752330A3846E6797E83B7DAF5D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "dd608171-b78e-44ad-9784-a7379d6c00e4", "value": "12288:WW6M+ANTFg8OqwCbgmGJdvcxLdmrSkGDw5np43NmejMJZlS:B6M+A9Fg8wCbgZd09deSkGv5j4Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "3ddc0de6-fd7e-4a0b-9593-03afbe3f1822", "value": 654048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "f4365e90-2b35-4d15-b339-588a6c4dab35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e08b664-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "96a493b9-6c21-4f01-b302-b7c177331b44", "comment": "Malware payload", "value": "b3289683fc598c5e821208c414087f03", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "c773f8b6-8546-4bd7-9f99-4d259991239c", "comment": "Malware payload", "value": "4faa2e403cefd3cd21e344aa14a97942024635d4f3fcba3d8ed0ea0bdbb7d24c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "15df27dd-458e-42e1-8136-d5078ff1d7e0", "value": "T142D54B17FCA154EAC4AEA132897355527BB1BC452F2063D72B90B6B82F73BD0AD793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "65899153-4fa2-47a9-8261-d96200b47600", "value": "24576:kf4S4iZlp3cgR28WpHTZtdQFb1HFHGQrfATw3kXmt28WipA5tZkpDe3QtvgYne:kfZxlp3ca2N7dYZrfATw3TtTa5Y4ce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "98eca0dc-399c-4b05-bf5b-f4d85fa632c2", "value": 2760969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "093387ca-2fc3-4d87-acd2-5750d9d84aae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e0bea44-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "f649beaf-2021-4e42-9ac1-bf4eeff0ecfd", "comment": "Malware payload", "value": "53d2e93e8d8578992a5395a4cfeb5593", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "eb5a5c3e-93fb-469d-84c5-23487ba7c435", "comment": "Malware payload", "value": "bfe2fc6fe55aa759d259f33c28c5649b6b2df05346d8c5d5aaa846d6be34e472", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "4091c2ed-6cf4-4fa0-8cc6-e1da6d1384ee", "value": "T19ED4AD19F8447B47C89B9274808FE428732BB28907523706384AE6793D8277DEF5D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "7dff7294-88bc-4982-9f05-0a4001aeb433", "value": "12288:t+zOHwfvWbmaIBrc6ansQYCVOGggcFBw5Wod8oq86t7ln:t+Ow2bmaIBrcnHVVOGgBFMpq3t7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354008, "uuid": "a045bf47-49ad-4ce4-8242-966ca33c0593", "value": 649304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354008, "uuid": "08081517-0931-4e0c-bf9e-f1d579406a11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e1c15f4-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "b8ec4520-c23d-4baa-948f-920a71588513", "comment": "Malware payload", "value": "3078c42203ea36f31afb2c0d903617ad", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "040e0f79-dc46-4cf6-8fdc-43640dc6783d", "comment": "Malware payload", "value": "fb182e60ea5ff474dd5b476d85c9c1d083f626f97f47e2fbdc49e7c4b3fff724", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "f91161a0-d109-4f1b-b481-cfb0f46b33e7", "value": "T193F44C07AF505FEBC49FCE31492EC30701EDD4C34AD2662A71FC4B8CBA9925A4AD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "ddcec1b6-0568-4edc-81d4-9131008ad515", "value": "12288:AgGYpx/rYIg62X+kA2SaMEkjR+vfNbJ4lhASeGarSni8gH60wRLKESUnShLs4/yx:Vx7gq2SF4fNuLNlXInxyeQk6p5G9Vnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "658e782f-101e-47ae-97e6-77f5c5603294", "value": 762504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "07904705-102c-47e6-bcba-279d85d40372", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e2330e4-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3b9d0f51-aad8-4d2d-a893-ac5dfad61989", "comment": "Malware payload", "value": "fbb5450bdc8404ed0fee3154999addb2", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "aafd9b48-cc65-444a-af5b-9f5c0e4e495e", "comment": "Malware payload", "value": "f775c30777e86c7439051a18be32e12baecb01ad911559d5c8fb26dd130fe7a4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "b9dec4e3-8c27-42c7-8c2d-580621d9492d", "value": "T16DD43A16F8809F62C5D0297AF65F82A8731747B8C3DB720699189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "af06aa39-e310-4581-a73a-57c7edc3ede7", "value": "12288:VppulDx+pQ3hC1ABt+9D1EQgpL+EF5FkE9fQcB:VvulDxIf8t+xCXFkEZQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "6e3ab404-c891-43bb-b792-601b4ee7fb8b", "value": 646220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "49df4d0d-3e40-4ef9-b7b0-5a0ba098a769", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e2b31e9-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "e60198df-8cbc-4008-b8ce-aad4e2087974", "comment": "Malware payload", "value": "6ce3f7d31c567f83f320a86a82e0faff", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "8116ab29-8515-4e4c-ab62-ce98a1fba59f", "comment": "Malware payload", "value": "69e1c626552dfd4a17dea52f60139ab9355a25cabd8dc25230bd83d1876d4db5", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "3dc91d5e-2110-4215-a4cf-24b380eac416", "value": "T1ABF46D98E7C2D4F1F65300F10A8FD7E21964A21A5053F6F2E78C2AA77472B526E173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "6445d49a-96ae-4552-a574-48e363084a3b", "value": "12288:7zmHbzgkJhHYhxm0MrHCtP8rek4wJxgBS/U0twVtg1mz0YePyKY2IzgLu:fm7z/JhHYhtMrHCt0hbgo/U0t+tg1mzU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "09e02dba-40ac-4430-a8dd-154bfdc36bde", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "870ffc73-fbae-49c4-b8bd-ca397c5dbe5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e2e707c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "888cb5f1-2e26-4ba1-bb5c-dbc2da7a997b", "comment": "Malware payload", "value": "3c62ec4a7538a8c0a7fd9a9b44c33d44", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "50711f26-a355-46d8-ad66-22f43656f32b", "comment": "Malware payload", "value": "4c6b9d8333521053f5f203baa362c50e23d4ae5f520957309f928dc77945c3f8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "4db94071-2c4a-4df2-95f4-108377e2e4e4", "value": "T1E0F45D89E7C2D4F1F66300F10A8FD7F21964521A5053FAF2EB8C26977472B622E173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "12ec961f-999d-468d-9c12-d30a697796f5", "value": "12288:P10Z0XhhxJhJcb1YKeee0XY9ttxA5cKkkEwEG6fMmua5rPyhRr8pMNULu:N0iXhhxJhybDeeeTttxAmKkJwafMmuaC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "d6b47bcf-42af-4653-ba52-5f13d5a47409", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "8a1d7035-8b17-4b83-8753-b528a7f4cf92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e357ed9-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "45b7cd98-2a54-444e-b4a7-94ae9a223b26", "comment": "Malware payload", "value": "80153202fa52f619936eeb13c22c5bb9", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3aa93558-03bd-41fa-b108-02973694a7c3", "comment": "Malware payload", "value": "f39f51685ce78b30f4606fda44c325d164e980ffdbbb1f8995f3fbe9efb1050c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "2d043ab6-f7f9-47c4-b4f9-eb49a71ecad5", "value": "T102F45BC9EBC2D4F1F65300F10A8FD7F60964A21A5053F6F2E78C2A977472B522E172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "584dfe13-106f-4584-88c6-6aa0e0dc988b", "value": "12288:O0h0CIIGh0Kh3C8avJWdqchgHyjlH7Vsc38dm4bVPyhdMjURjMLu:bhlIIGh0Khy8avJw2H0lbVB8dm4bbQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "add2724d-1dd6-448d-b0dc-2594e9b2de7a", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "22948cb2-3d68-435c-be5f-269728d00871", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e684d1e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "00ea624f-fdac-47e0-91cc-7332114f6be9", "comment": "Malware payload", "value": "ac58b4d9aa26b023447bc1f7ebadbf17", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "43943eca-4f72-44cc-9994-98980c116735", "comment": "Malware payload", "value": "cbf434c6d76326d1c6adf9b6042f2fbb55b19de1913034d7ff63cb36bed00b8f", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "067132f9-2cfe-4333-8c6f-3f997e1f19dc", "value": "T1C3B50957BCD10946C4E93677ACBE81C833664EB99B86631B5D09FE3C3ABE1D90A343", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "0d85cb48-220a-4997-bfdd-41bd411b03ea", "value": "24576:5XC32LyNV132EisUKemV04mdRut7gmjDoCsW3xyZHzQCQyPCwgsv02dW5jX3OE83:5Hqt5yZU+tG3RdzQ7x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "d98dfae1-e845-45c6-9cb7-68d606437e58", "value": 2293922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "e90816d9-f762-4f81-9cfe-6f5b03411186", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e8528a1-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "6ec099f7-097d-4d6f-a47b-dbc7842e42ad", "comment": "Malware payload", "value": "455b72db546daf87f37ba85720a82166", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "132ba4b4-ee4d-4e16-b4dc-6b2c1b565c19", "comment": "Malware payload", "value": "1ec3fb0b73e25f208b550d882d3c08033c896b3a9a60faa36fff4d23457dec90", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "b1255269-cbec-482a-bcdc-647c74216d03", "value": "T152C5F857B9910946C4E93A37ACBE81C833664EB99F86631B5D05FA3C3ABF1D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "8dbb937b-2515-41dc-b114-3d695f1aedb6", "value": "24576:M3Q7IigE9K/8GnISe8jFQ/x5DuJWr0Sp8LVvEtJAXLTpFlg1xPtdHKcCO32EIIAS:qEtX/kzX+O0bDdD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "7eb6261d-ea58-4ef2-aebe-bcdef5dbbe2a", "value": 2621602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "67906033-c799-47c9-a5e8-0d7d95eae078", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e91b6cc-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "06e67dd2-aecd-48fd-a9d6-b040ab1ced3b", "comment": "Malware payload", "value": "1bce3121f9b88159c5eab98e6a6752a6", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "6636971d-fe4f-415e-b5b5-76e20d1be88f", "comment": "Malware payload", "value": "5af1b359986a204d5a3273273066bffdea9f0a5b217ffab925623adcadd972c3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "ec5a1ce7-4a63-4d69-88b6-ed42086dd2fb", "value": "T15FC5D714ADC42AF7C81D5B3454EA8AD613B49D140FF1962A32A4FAADBC772347F079", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "1c54898b-e75e-49e6-9712-ae073b3bc9bc", "value": "24576:KnnHbJxVYOsYNVVfrMEN/VC0k/hmowQ/N4BdaDaXAGVjmC:AZY3tEbjmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "b17a8628-af52-40ee-8ae9-58b6507953ca", "value": 2621633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "8c963725-52d9-48b2-a9c1-8d04133591bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e93fb7c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "4faf203f-2651-4903-a266-6c5ee513c379", "comment": "Malware payload", "value": "7bd20f8e5ea4e780ddbca8bd236f56ac", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "6fbd38bd-6c54-4276-969b-d4d1ff2c00c3", "comment": "Malware payload", "value": "5aff3177b048e5b202170e4181cb3b7e675244897a6558e581f35527cf0511fe", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "619ffe02-d6d9-4eba-996d-b5fe677b0d73", "value": "T198B55B58BC9C6872E5CE67716E6602983339BC495F81D3276908FB3C7AF27958F132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "68ad753f-a99b-4aae-9f83-5a8024fbdebe", "value": "24576:9hYKr1UY/edkGkv9q5yrr86mMahqINhcVQMYcH+N/n583cXJuiGhfSimgPGOHXhe:daYozkv9jLIjc02g41mCvOR9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "171c4a67-22ed-42f5-b19b-b7b1ed51050e", "value": 2293922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "34766b20-d766-4dd3-864a-3c461ca994b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea19350-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "38cf8d17-bbe9-448f-bf42-fb3085c67767", "comment": "Malware payload", "value": "62340d5d740af0a6a10253ffa6272575", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "4a329774-79e5-47a9-9e43-f5c50da4a471", "comment": "Malware payload", "value": "11314d5692147115129ea050df865a528f156c2dd570a64b0e59a44e9fdf1bc8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "c72dcabd-4a39-4e2c-9ead-d2cf8c77bcdb", "value": "T15FF47C5BFD6E3843D2D6D33E9B4A83B1622BB190D32350937582432C94C6AEDCFB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "2dfc3c0e-f61d-4010-81c2-6886332a6987", "value": "12288:CXCvf+UTy7wudGtXSAx0YtHK63kelk49w5+9Xy//iUe9+:Q23uGSK0Yc6Ueb4/Je9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354009, "uuid": "ee58a6a6-041e-4291-8d8d-b067f9ac8deb", "value": 788400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354009, "uuid": "aa745d51-bd98-4230-92cc-e31dd4bda113", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f897597-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354011, "uuid": "27d576f9-c6c0-407d-a456-2191b089d9c6", "comment": "Malware payload", "value": "89274e34a8fe3c9cf3149f02455f1704", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354011, "uuid": "9126be33-a077-4cb0-977a-a1bfcf845587", "comment": "Malware payload", "value": "f36b190f329eb18fed51f0cd1af8a7ca545518e77db5b970c5f6db040554d9a7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354011, "uuid": "49d8b4ec-5cfe-49c9-9c77-78f64d4c9633", "value": "T104F45C89EBC294F1F65300F10A8FD7F20A64921A5053FBF2E74D2A6774727926E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354011, "uuid": "f1ae649d-d2b2-4a7b-93b1-310a840059c3", "value": "12288:st6eVHphnRhPwnKuDuTo7gx6HIaJQKHcwWai5PxmMP5PyupnMTmmOLu:86QHphnRhonKuDywHlJ/HcwWaCPxmMPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354011, "uuid": "76342fcc-6706-4eac-8234-3f82ccdc994d", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354011, "uuid": "9b963959-3ced-4a3c-8717-e9e68adb82c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "483a6cf5-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354026, "uuid": "78cd6b8a-50b6-4b69-af4d-32f97f1e13c5", "comment": "Malware payload", "value": "a537161ef364c9cd4f88f57ddc2ff557", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354026, "uuid": "91c355ff-4ec8-412d-bd04-c1e0ee921825", "comment": "Malware payload", "value": "c3482ed3326165ccfc786e34e6fdfe46b695ed63ec779d0fdd4f407c6e45b0b7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354026, "uuid": "c6944475-97ea-4060-991d-f98db548eeac", "value": "T1E2F45C227711DFA5D355C67004F3C6915AF621A20FE25086B26CC3287E21A6E6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354026, "uuid": "32b7cc4f-0b0d-4fe0-87dc-d615fecef6c0", "value": "12288:L6VUyd1cueqrG3VpL4SfG0VtkluTgW1UygpygsXy/dGkh6wNvVwjwL:4Uybeh4SfGmt4W1U+XPxuvVwj4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354026, "uuid": "1af8eb74-c9e1-4975-9f1e-0bf13b10b71b", "value": 763300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354026, "uuid": "31fee6e9-43aa-4950-b2ff-abb227951387", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ab3872c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "29563de4-45c4-44ef-8959-716400747b2c", "comment": "Malware payload", "value": "5f76f5573110934b37dd84213586a448", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4f0b7540-c6b5-4362-938a-630738049145", "comment": "Malware payload", "value": "fd127598a6f4a03869ae6a44d2d05c9576801090fe713b2ae292d728751db2c6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "b9a33932-6e00-45c7-b342-1efee538298d", "value": "T12DF46CC9E7C2D4F1F65300F14A8FD7E20964921A5013FAF2EB4C2A5778767622F1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "86326b6b-7a2b-4a62-a169-dab29db17ad0", "value": "12288:LT32r/Zh+p4h8NKopzC2XqvqoETKcgTZtuVfts4VWfXmDcY3dFPyuctGE+eMLu:LT3a/Zh+p4hTopzC2Xq+pgTfuVfts4U9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354030, "uuid": "926f879f-4825-454e-8090-202b0eca99cd", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "aeb6ef3b-4eb9-4a2b-9581-6d636f73e31f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ac5f825-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "54f5c65a-18d7-409d-b023-fb76b8694b8b", "comment": "Malware payload", "value": "f1c35d199d43b2f4dabb9e32d72db303", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "24bf4292-aec7-4e59-bfb9-0516de9029f3", "comment": "Malware payload", "value": "5738b85f72cc05f76b2148998d6a8d0ce8b3c781bb7b5d558c982d830002ec7f", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "e111b8c8-7599-4e65-b653-fc441002cd49", "value": "T187F46C89E7C2D4F1F65300F10A8FDBF20A6452165053F6F6EB8D2A977472B622E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "1be43fc9-8b78-41ee-a3d4-d2260aedbb4f", "value": "12288:hf70Lk0BhKPhx2hju7fzChboLXPmYEn2UOoKvaEyimNqcPyh3uzAjiLu:hfALbBhKPh0hju7fz7XPhEnPOoKFyimT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354030, "uuid": "d8229b2a-0b13-48e7-a318-49daa0d25dc3", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "57dd704b-3af9-49d7-af2c-36c4221b72ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4af1e058-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "57abc462-3802-47db-86d4-3eb0bc5e9992", "comment": "Malware payload", "value": "f461e57fc67401bb8d5107191d1a5f8b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "bd1c2360-16dc-4272-bce7-d4d1dea0b34a", "comment": "Malware payload", "value": "eb01b6a0b812abdd85b24574db761faefcf3fc137cfdb48a38c6ed05435ec05e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "769773f1-339f-4f99-9c78-77249f74545d", "value": "T176055B46FB1C4563C9470EF1293F53D5F7257A4341F8922A370E97672622E3A9AC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "67e1feba-ab57-4556-b667-b0a0da238330", "value": "24576:01L+aQ8x/sHhssK7WeKV4ugynqQas0+lK:01L+FesasY1KV48nqQasu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354030, "uuid": "fa5711df-ae89-4d4b-b503-523f640d9266", "value": 857000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354030, "uuid": "dcbdba06-eb40-4378-b2e8-4bd4b116402a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b3de86e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "a0a6ea4e-08de-44d2-9fd2-d56e1ea95a25", "comment": "Malware payload", "value": "4d8aa1f6da2511a0b6c90448809d039c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "860a05c7-3089-4d99-a4b8-ea2acbed4543", "comment": "Malware payload", "value": "9b729113f84240c10988f9f79debb3812de090a8b617f65e41c6a53b54df9ca1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "472ca400-fad6-47f2-8b7a-6977d364abd0", "value": "T15EF46C237711DF65D355D67009F3C6904AF624A20EE2508AB26CC3287E60B6D6E5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "978ad2c9-0d71-4545-bfe0-6f820ff7ed9b", "value": "12288:DxyIAKcLdxKIE3pS42bGWkTEMIviwJlgpygy+639StdVljli:DxyI+LJ42bGxEpiwJP+4IdVljA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354031, "uuid": "32b28aec-b6e5-45cd-b1e6-b07833ff9ae6", "value": 763276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "11419c17-dfca-4a98-83e0-4ec2ff697db6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b40b36d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "222fce4b-02d0-4268-b94d-9e4f3f4fec1d", "comment": "Malware payload", "value": "04869baf086752d986de0588fefd9177", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "398c5f5a-0ab1-4207-9f58-704f26003344", "comment": "Malware payload", "value": "c62c432e91cf4ab6f07c058c5dd6762224a6834ddf69e65618d7d50e1c06f57e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "66149e62-6ceb-4a92-8b78-f57d8e6a420c", "value": "T135F44C07FF506FABC45FCD31892EC31601EDD88396D2662A71BC8B8CBA593560AD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "c3f462ed-d584-4d1f-a7e1-c70027ae8068", "value": "12288:d69q34/Ki30KwrIRwnwJyjpHKfpfKVnVbcuZQKYvSkZxRz3fupamfreIkS+6FtVV:M/X0KcwJFf4NVrDKzyPR46tVxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354031, "uuid": "014b9f6b-b21a-4685-aab6-a4b3eb7137c6", "value": 762432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "41b5853e-c58f-4530-9438-a7ae2ada41ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bb2884d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "9c1c2499-fd05-4c58-b3a5-8a502194fb6a", "comment": "Malware payload", "value": "6dc3b3cb05dba816a09a1325d2f02022", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "54ffe2c2-3e20-4879-92fc-afda682de51f", "comment": "Malware payload", "value": "f65ee8c702e45de5d11c321fae5ec94106cd2957da705d55a192079aab21aaf3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "015c9d9b-8c70-45b0-b094-acc0cbeb289e", "value": "T12EC52810EDCB18F3E5032A3119ABA2AF27315D454F24EBD3D644BA79FE7B6D108362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "9d1f0cd1-dbe7-4a4b-9730-9592d66d26e3", "value": "24576:PiwoCNb5WeZFF8qJrPkjllraeMkjVnaAWI/G+OCcMP2RrXbKiW2eZkSYqPlbox4J:PiwoCFZFe8sT+QvDlc/IQHTzgGG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354031, "uuid": "a927a0cf-c277-4ed4-af26-2fc635ef4235", "value": 2523298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354031, "uuid": "38a8dc36-0690-4c92-9f82-4767816ac539", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c10e64b-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "f2d21a9e-2e3c-4afd-8b5e-ab8ac38584a4", "comment": "Malware payload", "value": "abf6e2082cf2583c6e3d68cdcc380ccd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "2090a0fd-5250-4318-bb1b-6c8a28aec031", "comment": "Malware payload", "value": "a5043f7569c57fbd1c4ac1dc95e5e0de0f800499358d81e396cf68326759a9ac", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "6d787464-ffdb-46cd-b626-bb185db8c078", "value": "T1C6D43956F8809F62C5D0297AF65F86A8731347B8C3DB720689189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "57ad4c5b-f5d5-4bbd-b26b-5987fad2ec87", "value": "12288:LiQBmttCdQqLaRrHIKGTi4dpXgpNxDetRJmQTuWkF:7mttCSqYLGThdQ4vmCuWk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354032, "uuid": "9b31e269-e1ed-4c1f-b920-9b05d3c981a2", "value": 645128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "53325bae-fe3c-4152-a572-0c50a7e0cb32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c17f155-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "a1c77118-2331-4da0-8b11-8e6066ef2650", "comment": "Malware payload", "value": "d7c5f809d93f3550bd7486f2b0135d6d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "a38614af-ba28-432a-b1ea-3ea75f61fe3d", "comment": "Malware payload", "value": "c5725a84e816291819ec9fb6dab2b4bde77e0434742480b888b9898e0a2f5fda", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "8973071f-3fbf-40be-94bf-a5782c2d81ea", "value": "T175D43956F8808F62C5D1257AFA5F82A8731347B8C3DB720689189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "88d37f9e-5b9f-4ccc-9464-4858768ddb2c", "value": "12288:Y/qvfRgAXIp3WRPT7n8F0LEkgpNxDzWaCAZ/RWKk:SqvfRn/NT7nJQWAtRWK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354032, "uuid": "35c01a44-1b0b-4584-ba56-d7d2cc761587", "value": 640464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "deb17644-9018-4a3d-b90b-5055157a3912", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c18ae98-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "d9fb6e66-eec4-462b-a5c9-a96d46875408", "comment": "Malware payload", "value": "75694f3a25f2f81585324ef3d93fed85", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "59304fa0-b987-4195-95db-ddfc5719b548", "comment": "Malware payload", "value": "6bdbbbd6846615efda15158255e6855b311e2f2b2461688d4aa44879d27803f6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "e061fd23-a6e1-46b6-b854-f925cbb31b58", "value": "T199D42916F8808F62C5D1257AF65F82A8731347B9C3DB720699189B383BD786B4F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "148c7132-33ef-4b1d-ab39-5ac80244e3b0", "value": "12288:Ymhj/s84ZcJjzjxTHWzcWl+USlgpNxDFkqF/mVc/:Lhj/szIj9HWzckzmq5mVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354032, "uuid": "2697d466-498b-40ec-bb9d-180537e92530", "value": 641076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "83a7f71c-fbff-4422-b66e-c2416e5ca134", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c5e6fba-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "3a1a9df4-1891-4947-9fb2-6eea8a2c1084", "comment": "Malware payload", "value": "f64a78c04dbaddea18dc34361504a031", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "11e2b9c4-2518-4d63-b9fd-61f75aa00cf6", "comment": "Malware payload", "value": "c04425c7881b473df7c8d0fe1edd2ba8fa043fc27ac1b635a340ddfde6feafb1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "d36c34ca-6625-404d-9874-e5c99248b17d", "value": "T173F45C07AF546FEBC49FCD31492EC30601EDD4C38AD1662A71FC4B8CBA9925A4BD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "f5fa76ae-d413-4311-a469-36667db191a2", "value": "12288:y5P3ej71njtDyUh7jjbrCfQZxJWrFJaWwGFXPw0ZEyjkaxExyi1pPEE3ZSR/8Q7a:G3S19ufQ9PPe5mg1eqLW7M2V0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354032, "uuid": "d8b2b332-2e90-49c0-a755-4e5b8a33b00e", "value": 762904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354032, "uuid": "adb89d63-985f-40af-9f94-d9fffa277d64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c7ee7fc-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "58ee0091-fee5-41d3-8fde-7db19cf1b3b0", "comment": "Malware payload", "value": "bd474a8f22329cc4e8d5cfb5aa1fdf96", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "f91790e3-a9b9-4e4e-ad23-0cdb8558d3d2", "comment": "Malware payload", "value": "5920efb5ab05455803dd7398d1c8de35b88dae8981142872e1270d714680c7d6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "11d329e9-3fc9-42f1-b09b-319143c88570", "value": "T164F45D07EF405FEBC49FCE31492EC30601EDD4934AD1662A71FC4B8CBA9975A4AE35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "0f88b81d-a889-4acb-ac72-ed3b76c3158b", "value": "12288:QuEZA/DOMo2yNG+HHgdQP2ujcAVfwTWn3uxn2xXiRNGd62Cn5yfW48QSLgtwKEyh:EA/DOMwNGczfwbxn2xXiRNwLtDKKMTSG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354033, "uuid": "c1bdb712-c973-4eee-8264-cd03c90b04a9", "value": 763036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "c5d37b38-6d1d-431a-853a-660dc52bf5ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c8c47a3-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "560129d3-777f-47bf-95d0-e4c5f3a1c648", "comment": "Malware payload", "value": "0c59d601dc72bd02f89b0acb3cb82c0c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "3d97f082-83e2-4c28-9f10-dcd32566fc53", "comment": "Malware payload", "value": "633315e06d44ef730787a423ef8cb22fd116f1e19b9f413d808e7ecfd9a4e5b3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "dee41d90-4b51-4d64-9475-146f1efd4637", "value": "T114F45D06EF945FEBC49FCD71492EC30701EDD48386D1A62A71FC8B8CBA5935A0AD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "c4d1ff62-9186-4b76-b5ec-13dafcfa263c", "value": "12288:1WFH/D/9FlHk/jeYNFCj1DyjYm/f7NwruhMDldQZkFiG4uJ53LVXoVmWzKGg6xWb:UZcj+DCf1Kg3/LekQgiXFAYs5GGhVxj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354033, "uuid": "a12eaeb3-0b6e-4076-b7f2-4b9ca8e97d86", "value": 761876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "fc14f2d7-41b2-46d4-b625-5070a51c4aa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca01e2a-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "d38fac9a-87f2-43f8-8375-570d37de0688", "comment": "Malware payload", "value": "0d1f220b81100cc86a65b129b9bdd543", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "99745ad0-bc45-4128-8e8a-809a40e005bf", "comment": "Malware payload", "value": "c332a1bd19c0fc80ff7e9a03314f2ab0ebb0663695c4f52dfc9c27a04a2cc996", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "c01303f8-d81d-47aa-b2f3-2f12c6108a65", "value": "T1E9B55B27FC9114E9C0AEA23289665693BBB1BC480F2123D72F50BA782F72FD05D797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "7f25d1b7-02f4-41f2-8c37-dbac77723f08", "value": "24576:9UiYzzQhsp3gZKpH/0HACcd0UWLGVhdXdMNfX6J9sAotZMn/XR520VeWF5X:9UiWzQhspQZ+0acchdtM1wZod0YY5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354033, "uuid": "1d4a545f-59de-4c2b-b722-92c1397bb486", "value": 2384137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "436a1cf1-e75c-48ca-9da7-7ee2ec399ea8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca78450-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "48c655cf-19f5-4d08-9788-c50ada6d2e53", "comment": "Malware payload", "value": "ec0a681a8e25461f244908ce752a80ca", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4ed2a8b2-f9cb-4da7-aa68-303510497b65", "comment": "Malware payload", "value": "22d021a7967e2eefea61c969687acc198fe19f5aec9e28998b556d82f2b50908", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "2706387d-a4da-423d-b21c-a30b7cc2dc4e", "value": "T1A7058D2AB2B3F17CD01BC03417DBCAA24535F47526212D7B26C4DA353E66CE22369F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "eabcadd2-487d-434d-bd71-7cab6ca094da", "value": "12288:SC9YdJ4JdPHfcb6uNgLpQW3R45/XZ+Nn6IayzZodHX:j9YJn6uNgl/3Ry/JDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354033, "uuid": "6dfcb660-195b-4d56-80b2-f8138ee3f735", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "01bfed8e-2ed9-4783-af3e-fa037db17ef6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cd11a18-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "264de2e3-ae88-4302-b195-0775778f812f", "comment": "Malware payload", "value": "ad8acfc47af3db978c50b440d191ad3e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "50c843c9-69cf-42df-b08d-8cbe506fe718", "comment": "Malware payload", "value": "f5ca8759fead0bf395a0925c30d9c79d71fdaedc9657acf799b1004a2ac64a95", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "38e632bc-0511-4417-9ba8-92e62b82c5f3", "value": "T180C527123B69EB0EE11862301DF1DBD86B291C8902D6A517F746F319B9F306C4A6ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "51468a59-3a41-45c2-9479-23a11b5171c9", "value": "24576:eTfqnRvdnFE5eIW+oDAMSnFTsdsNWHBzlA0hgVrULXGFVp9OBQ53V5A98PhPms1:eTf0XC0hL+fPBPNmi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354033, "uuid": "b826bb70-e4eb-4ffd-b4ce-dd10a71f07bf", "value": 2621633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354033, "uuid": "f5e8726a-9abd-4251-8495-23e8267dd8c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fe7b2bc-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "129ebbc9-902f-487c-b0de-65459ff39cea", "comment": "Malware payload", "value": "d0927bd23b0efded521d436fa57a4522", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "867b8b1e-0451-4d7c-b276-5d8efffe7901", "comment": "Malware payload", "value": "0b081d3c3292ce0fd391b4cfc533dc2f7a8f249e6fe76f4167ec5e3d36f2353e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354038, "uuid": "dd3ce6e7-7b77-4e6f-8f75-ef89e8f96f9b", "value": "T159F47D623721DFA1E355D67008F3C6505AF621A20BE240DA72ACC7287E2166D6D5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354038, "uuid": "edbb21af-f744-491c-8100-6a9879f7fc04", "value": "12288:alsmj7aEuogXX4FwGwYFFQS1EJVfHHXxsJiUfgpgVuFFWbz2pwVxbg6:als8aD4FwGw6FmxsXgFE6wVxbb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354038, "uuid": "878eb805-26ac-4594-a5cd-d2c0cfc26946", "value": 762416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354038, "uuid": "7ae48569-a7fe-45d9-ae41-d447c10fc268", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ffe4941-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354039, "uuid": "67b3f882-7a3e-47fc-b784-d9ab21292111", "comment": "Malware payload", "value": "03a729f80ee5df4ac41578fb81084639", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354039, "uuid": "a7e1f4ac-b0ea-4f8c-8541-8fb49aa2bb57", "comment": "Malware payload", "value": "94a13d945dececb30eef824daf2db5eb8784dbffe6301bdbf9b7983baada9a43", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354039, "uuid": "81ce555c-4857-4e0a-bf97-03226200be95", "value": "T13BF45C223B11DFA5D355C67005F3C6905AF621A20EE25489B26CC3287E11B6E6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354039, "uuid": "d54907d3-ea0b-471e-a5db-ff78f4be9fe8", "value": "12288:P/xMjZYfN3at08D3O4NvGuChKS+WBhsd40gpkgp2Oqp7U5bjoOV9VnjkD:PJMjgNr4NvGPhK4Bui/20wG9Vnji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354039, "uuid": "c7f20dfb-5a29-4f19-ac2a-201e7727dc9e", "value": 762504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354039, "uuid": "b64c5bb5-0316-4102-9ea3-9d6dcf540740", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5436a2ae-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "508075ce-18c0-45ef-8904-20d253d903f9", "comment": "Malware payload", "value": "f362e7b2762617390c9e564f0db83ae3", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "de442553-a24b-4ce5-955d-061b86c4988e", "comment": "Malware payload", "value": "bec10d4b4f8f8e83349e025b2844f3abb36a42d8f80fc1c268b4d2b155d9991d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354046, "uuid": "9a881971-f692-41b5-8c0f-6f4aea9f5e65", "value": "T1B7057C2AB3B3F17CD01BC03047DBCAA24535F47526212E7B26C4DA353D66DE22369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354046, "uuid": "c3b10f8d-9a21-497a-8678-e6afa5edf329", "value": "12288:J1/bmtljO6dWHAANXNgk6xjszAi+oZW0iiSQiayVz02HX:J1TmXjwXNglJszDnZZvb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354046, "uuid": "882cb433-2449-464e-bfdc-6052a59078d8", "value": 830224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354046, "uuid": "398ff3f4-265e-4dfe-8be6-d214c4a2db2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "543d19e4-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "d6a75418-20e4-4057-bf1a-a4dde8368c90", "comment": "Malware payload", "value": "a83e4e9974a40a925bea2ebc045b8b37", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "881ade59-b575-4a46-b655-d5809abbd9b8", "comment": "Malware payload", "value": "fa2a02753016466be42105840d72c9a007e74e1b987e376222888575ea9ec049", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354046, "uuid": "20c7e9fb-6c70-44bd-a153-14b64f2bd875", "value": "T1FCD43916F8809F62C5C1257AF65F82A8731747B8C3DB72069A189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354046, "uuid": "2691e1bd-21d9-42aa-b3d9-b377d28075c1", "value": "12288:9w6OLaB0YBaTGQjdsKqk//gpL+EoiD36W1ncl:S6OLa2sSdsXk21D36Gnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354046, "uuid": "e3393df8-3912-47b0-b86b-ed9b350fe875", "value": 646072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354046, "uuid": "a8eb4e85-542f-4bd8-abf8-8070cebff7a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c5b4e7e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "1cb16963-dc5c-4bec-a844-d0a37e6e5e37", "comment": "Malware payload", "value": "8d32584c4bd2c1bb78d3f7a9e0e1e4f1", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "861af152-47c6-4740-adce-80b47094cd92", "comment": "Malware payload", "value": "dcbcc3577e9021f91ade4efc6a83d5185b98de27d898e00405274875c59a29a1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354059, "uuid": "f7e9c8ed-fb78-4ad6-a443-2abba7aebbea", "value": "T18D057D2EB2B3F17CD01BC03407DBCAA24536F47526212D7B26C4DA353E6ADE12369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354059, "uuid": "bf22ae42-61d3-40e6-8a10-29b573fe5760", "value": "12288:1m7xfJEHdd2H6qNgPlr25PXVhS/KyNTlf2J9ay2P8pppppEppppppppptl0MHXsL:1OxREkNgty5PW/KgwYtl0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354059, "uuid": "7f28d87b-9ba8-4365-870c-dc3cda32eefd", "value": 830304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354059, "uuid": "aae30c2c-6861-4c20-aabb-bd14430c3725", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c970264-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "4266428f-1f75-43a4-8180-e05dc5520268", "comment": "Malware payload", "value": "f05cc8644cb4502909ac126292c878c6", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "f424e050-8352-4ae4-896b-9aa353067b0f", "comment": "Malware payload", "value": "6f25aaf82c8591c3fa8af1ab229fe02b5db9079e096ae6ca42381594e365c51a", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "35c58e82-497b-464c-b8d9-5fd02e61cb1a", "value": "T1ADF45C07AF405FEBC49FCD31492EC30601EDD89389D2672A71FC4B8CBA9965A4BD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "6f7470a4-edff-4e03-b97b-00feb605ce7c", "value": "12288:Y5fncphk1AKPlRc3NLuBIjBs9fF5yT8KIHy+eN2xziELaaVQC5znxK4xeM4FqhYF:UMhkXcdq9fF519m3X6jrE5f/RXaIdVlj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354060, "uuid": "af7e834b-0754-476d-abf4-5722b6058e32", "value": 763276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "12a5f532-5860-44c5-be60-b96dc736ba4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c9e4cdb-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "12023cac-7f66-41b4-b3f1-8b8252792867", "comment": "Malware payload", "value": "00b37a4603a647b64932c7c089a13bcc", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "e48cb517-6033-4e54-9f44-28e3883141d9", "comment": "Malware payload", "value": "d15cec8fbc520f3c8782432daeca9377fc358eacd554fd17216097dcde1b5822", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "a2d15fba-730b-4c43-a140-433ff76c8b04", "value": "T1A3D49C29F8047B07C89B5274808FE428736BB285175337062846EA7D7D83ABDAF5D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "e6bb6bc7-41f2-4592-bc73-0dea12fbe518", "value": "12288:TxXX+qrUkSEEDebJU/6Xlinc+B3NpjyT3wrw5spcIm6jrHZlF:9XX+yUbfebJmGiZpN83w6SjDZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354060, "uuid": "dc7f20d1-7250-4111-9cd6-5d1158fcbf98", "value": 654456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "b025a298-94d2-4038-8d2d-b328e5bbd603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5caa0fd2-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "c0d75ff8-18ee-4099-86a3-fb2ddb62fbb3", "comment": "Malware payload", "value": "254dd69e9e7340563f738d9b1330eedd", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "70445e5f-8d08-4978-8464-9f2c2b5f11b3", "comment": "Malware payload", "value": "5609ee0b4ef1bbc39323a542485e5bab1a40ff8ff32a106be6f0083442f99c5b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "e24accaa-fda0-43a7-a772-410a84e05d87", "value": "T1CBD44A56F8809F62C5D0257AFA5F8268731347B8C3DB72069A189B343BD786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "11fa8297-0e66-42ee-b238-8a6b71932133", "value": "12288:lzPH4HLGWaEauI92bqD9Ngpg+RRZ0KpEKlLcm:JPH4Hqi02bia/DpEcLc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354060, "uuid": "61d0bed9-70c2-4ac4-9c15-ae79e76aae80", "value": 645748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354060, "uuid": "b3d93d07-17a8-4002-aea3-4b58e8abbc29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d19140c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "9111cd23-0745-4b16-aaeb-44ad4e434a42", "comment": "Malware payload", "value": "259ace1799078dc5430207017a3b449e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "c1d74272-7137-4421-8771-cd17bdc72bd7", "comment": "Malware payload", "value": "9c781b983aed5d4db5f5bee06c6da731236bbc781caf552508092d4c01fd60d8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "6b73d672-efb5-4c2b-9d76-d1071c27fbb0", "value": "T120F46C88EBC2D4F1F65300F10A8FD7E21A64921A5053F7F2E78D2A9774727626E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "c8cc8a40-8ccb-4bc7-846b-59bd34424470", "value": "12288:hgrJePghtQhL5W7bGzOOK/gC0qc+CKa/SXXuHy+mfFkNPyKSjUVZVHaLu:hgFeohtQhFW7bsOdlcVKa/SX+Hy+mfFC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354061, "uuid": "32d70940-a6c6-4e2c-8312-6bd3a82951f9", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "1042008e-9a7a-4fc8-a8fe-a2494f078931", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d75c654-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "6c920bec-21b9-43cc-910b-ca07e70baaba", "comment": "Malware payload", "value": "6b70500d0fc8c3c98300c8d74415602c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "f2d09474-cf14-4657-8c06-bab7262a096f", "comment": "Malware payload", "value": "e2cf061da82c4552499b1ba7a68d8bdb0f405b8c66e04ee1cd173e02c7e848fc", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "a374f060-e684-402f-8cc5-972e734890e9", "value": "T13F055B42FB1C4563C9470EF1293F53D5F7257A4341F8922A270E9B672622E3ADAC37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "03a3c9b5-4315-4e97-a64a-822908e92be4", "value": "24576:QprxdKak/foDQil7VJX3tZEnkKtdEe+lk:+rxd38o5lJ53tmkKtdE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354061, "uuid": "2e57b971-4e71-4143-acda-5aefcc8b50a0", "value": 857328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "67820830-499c-4b43-8c81-571daa8c925d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d82c5f7-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "52a8cb4a-591f-49c3-a605-08e401051a3e", "comment": "Malware payload", "value": "2395a59701c8e04850d61871bfadf36b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "f8672c34-c881-420a-8d41-924de336e7fc", "comment": "Malware payload", "value": "f264905beec86346e939b49b1966c8857c023962643bc46508673b3e40990134", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "bc9dc48d-294c-4036-b752-7e6e3489743b", "value": "T11FC54A19BC5C2852D5CE66726E7213C43339BC485F81D33BAA18B77C6AF27988F172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "080137d5-d49f-4bb6-98e7-0fa9eaa4a305", "value": "24576:YnyvEemU/kb2Dky2nG1LEgzsplvHFXLgZ01vL+w9kWg6nc0xaqB9uFYpPtu0vU:qemU82DmOspJFAckOGY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354061, "uuid": "4f2dc49d-5e44-4c56-aee6-9e60de02fed0", "value": 2687138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354061, "uuid": "239979e1-fd43-4951-aa48-62aa217ffdbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5db1c382-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354062, "uuid": "be4bef4c-ec31-4a9a-8f31-2c6386cbe6f0", "comment": "Malware payload", "value": "96449395d7a7931b0d15d1f8ce762025", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354062, "uuid": "5a25bfec-91a2-442c-a4db-75b7fb730691", "comment": "Malware payload", "value": "b7611403807e4f87691fee4a1938e001537d46dd69cd1d1028ed591a131a4a44", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354062, "uuid": "84cb65c9-9b25-4733-af83-1ac86411eadf", "value": "T1E5055B42BB1C4523C9470EF1293F5395F7257A4341F9922A371E9B673621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354062, "uuid": "56ef6307-a360-48a3-83e8-ce93512a3f5f", "value": "24576:H5AmRPzX2RkeHTFMaNzg6EIhtGvvhup6K25K:H5Am9iRkcFHNzwI6vvq6U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354062, "uuid": "f1972d0a-4453-4d5c-94a2-0153d9af106f", "value": 857808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354062, "uuid": "74dca022-904e-41d0-a37a-4d2685e05d48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dc689d6-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354062, "uuid": "d9654d00-504e-479d-bba4-0b83cdc46fe4", "comment": "Malware payload", "value": "0976a2fd9c5c437c1a9b0557526182ca", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354062, "uuid": "c8eb98a1-dbd0-4e46-9529-a7361f87d4f2", "comment": "Malware payload", "value": "3e90ad39051b8f9b03ddb6db6a8640368c7ad05ffb43ae140047694878a912e5", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354062, "uuid": "fb28f51e-c4c4-4805-a2d8-cdcc2fdd32d9", "value": "T189D519127B28DB0ED51922304DB1CAD86B696C8502D2E917B349F319F9B30AC9D6FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354062, "uuid": "6eeb9cc5-59cc-4829-b424-83c0015bf509", "value": "24576:YB3jVAPJtjvRu1poHY4jj6MNYYFIsyHJ7xxOVKybMeQEviSP7k9O8d9fDEkGzivl:YB3sGXOgqfcFJMlYaF0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354062, "uuid": "bc5a8795-821c-4ee8-bfcd-9128ed5c407f", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354062, "uuid": "8ff5fc30-fa2b-4963-aca2-940919e0091f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "615f964e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "e839e941-65ff-4067-9feb-d0ec06874d17", "comment": "Malware payload", "value": "81377ba3547dfb164c115c2ad98d6ac6", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "4b2f9ad0-8f90-4c81-9b2b-cd12df057690", "comment": "Malware payload", "value": "1f57cc884beb71fa66b710d5b5fb94113920ef3f82e68e310086c475a38f0a75", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354068, "uuid": "5f616eb7-fb51-43bc-a021-fb502f12603d", "value": "T1B9F45C07FF405FEBC49FCE31492EC30601EDD48389D2662A71FC4B8CBA9965A4AD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354068, "uuid": "702dd5e4-5c98-4ce9-b262-efbb619678ec", "value": "12288:jfpnrJ7aJPkkCDD8UoVMjb80fXuZ9w8BOCoEljr8YVomXohFKK+TRxYnByZy18UF:lUJPkuafXS7ZK77CmpRVh4V0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354068, "uuid": "2d794e56-e936-4f69-86b2-90415e8767d7", "value": 762792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354068, "uuid": "86e7f4ed-e10e-46e3-bb51-e60d29f5cec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "616d634e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "931aa0b7-3ea6-4939-9b14-2ebe2ee80b30", "comment": "Malware payload", "value": "6f7ae0ec491e5411b45c4b62d2a5451b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "164ec7ce-d1f1-445d-97e8-1911203fa075", "comment": "Malware payload", "value": "7afb8b3f632e3cdf511d258aa5ddf53631df088a1aa0c167b6ef3194e5a15d1a", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354068, "uuid": "35be21db-79b8-490c-b101-c7a9d2c92748", "value": "T147A58D06BD985E5BC57E12F388A112D82734EC45AF8697139E14F73C3CBB384AE4A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354068, "uuid": "3e3cbd42-fbb0-40d8-b020-8258c47e2b9a", "value": "24576:JOE1+tMkgdpgh7y4QGgQg23cGFL1IN8GNnvaXu0mYY:oE1rsHCiFQn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354068, "uuid": "94a95c30-be97-46f7-a8da-96e429b2dcc7", "value": 2162850, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354068, "uuid": "d37783f7-48e5-4c99-bc9d-723bd9a61aa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6894f7a6-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "dc7d5e87-08df-4d18-bbb7-668862bfc57d", "comment": "Malware payload", "value": "94d8d80a19027fdb2464cde9dbf37ad2", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "4c51e48b-5046-4be2-a0bb-4873d6ca0654", "comment": "Malware payload", "value": "844d796a941227a5aee8241aa77e111425c672c39948dd0602c325d179fa2f4b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354080, "uuid": "8a7d581c-6258-4b21-b124-7e79180bf6fe", "value": "T155F45C06FF845FEBC49FCD314D2EC34611EDD48786C1662A71B88B8CBA9935A0BD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354080, "uuid": "0b8ac2f0-70ee-436f-8dde-2e5b6bb2af21", "value": "12288:NWunHXAwkI9QgtUaKPOiiZhjCa1fzmz4mG88K1tUSFt8782RaFhqzDchlQ31D79Q:OwkLgtNXZVf5rRIY2lzm87c7dNfoZPYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354080, "uuid": "b6d3dd27-e1ec-4c2a-b645-d3cf884e8bc6", "value": 762496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354080, "uuid": "62f61379-4566-45f2-8773-829e739aad54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6950ce99-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "ec7f0c96-ec24-4a7e-ab4c-161641a24590", "comment": "Malware payload", "value": "b8bc2e3053daef8b049b292cf1f608d5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "d6c13484-12b1-4377-b7be-b7462b5b9227", "comment": "Malware payload", "value": "0fc720dc79d1a52a3a6fa9802fd6b4dfde1d0f29af9569fffa0c27d83d73182b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "8ab21ec7-c8a7-47e3-9543-15178c3bbe37", "value": "T1FDF45C06FF645FEBC45FCD31492EC30601EDD49399C1662A71FC8B8CBA9935A0AE35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "d289a5b8-2622-4cb6-a162-41d786a1a5b6", "value": "12288:KQJpjWuGGuIgnX+e+dEyZpjc4Nf51QDOBNJjO5QCZgiPym3p9hb3D25iGQrOAY1S:Mu/gnOtZBfD+JPhq38kqB7YaO6wVxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354081, "uuid": "0057828a-a811-4cbc-b0bc-e39c98eeb538", "value": 762416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "b63e06bd-182a-431f-863c-22f8da6ec084", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69551882-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "d4315338-a083-470e-be97-02feacd9d212", "comment": "Malware payload", "value": "01b4b1271e78ed07b5b4669d02a2254c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "854fb1c9-ace0-4a08-a727-01299cf7e9d0", "comment": "Malware payload", "value": "41b5c8615a60241b8df3c38ff80e10ecad3e46459de61727f941ed42c5520126", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "1fb4a4d2-bc18-43eb-acde-9eb0c4ebc116", "value": "T147058D2AB2B3F17CD01BC03057DBCAA24635F47525212DBB26C4DA353E66CE12369F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "e9161d55-e8d8-4820-a619-dbe9b29003a3", "value": "12288:eSA1uM2n7vdFHnh+XNg7y/QOwLJZdkCqtIS0oo0RKAay1PHRHX:jAMM27wXNg2QzLJMCqWS7RPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354081, "uuid": "90d541cc-3dab-4982-b4ec-fe6b5819b201", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "36882d71-62fa-4bd8-b5be-13a37fcfebfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69555d33-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "8739c7a8-265d-4071-a907-09b0690a900f", "comment": "Malware payload", "value": "930e452190474b6f98da0e28de820d64", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "8b8d71c7-01ec-42bc-8979-9de70fa82ef2", "comment": "Malware payload", "value": "d82ad1550e03c9bcd716ca61975e723b6cc92aef28d331ae0cc99e5d033d08c2", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "d8032fb2-3294-4977-8b75-1908a668f103", "value": "T1F9055B46BB1C4523C9470EF15A3F4395F7257A4341F9A22A370E97673621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "f872d1b4-aa79-461b-834c-9a8c372e7f4b", "value": "12288:Naw46mKQ6FXAZUuR6HwpwM+mDoGPgeBKRkip0MKfvU2Eew6lbJNR6z15Me:Nt46PAuuR6Qj+JZeBKR6fvU2EePz6J5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354081, "uuid": "e9735a1c-a45a-4c31-96b8-4bebfb0e8d11", "value": 857868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "e68c4adb-7129-450e-9ca0-5eb8b7cb768a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "698d7c8b-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "37aace8e-e029-4421-aa86-4a0b4f421c3c", "comment": "Malware payload", "value": "f009230ed0e5729839e28b3a9d17ed69", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "15748751-8a6a-4fdb-8f74-64a0feb9fba5", "comment": "Malware payload", "value": "98e4eae73d888e76df022a93a5f35caefcbfd63739bc846c9f71ab25c2e94916", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "83d67d76-a587-4aa0-94f9-64fbd8d5cb86", "value": "T189F46C227721DFA1E355DA7009F3C6514AF521620BE2409672ACC7287E21B2E6D5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "db9cc841-a304-4ded-b7b7-7c7ad0b9df8f", "value": "12288:twHeidt/X5ewZMOZxP44hGnIRzrx06S0Ma/gpgVH69KMt02PhVxj8j:twHZe67P44hGIRU0MaR69yGhVxjU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354081, "uuid": "5aed7331-8402-4f28-91e3-b52fde138594", "value": 761876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354081, "uuid": "dccfabff-c759-462c-b87b-8c50e78c826c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69d64ec7-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "19c2713f-47de-4f3f-bfe5-04551277f2e3", "comment": "Malware payload", "value": "a7154548bb52629df7ffd41becd8264a", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "3fc9a09c-b4f3-4a2e-b3ac-0279698165d5", "comment": "Malware payload", "value": "95181ba37073c75b49e9e0b9e8e3fbf570bdf88ea2d1f79f8eaf51aecee362ce", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354082, "uuid": "9557a0ef-d16b-4717-9669-ab7c5fdea54c", "value": "T1BFD5F804ADC52FE7C81D5F3854EA8A9613B08D144AF2976725A4FAAD7C7B2347F438", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354082, "uuid": "8f64cb5d-d624-4499-a645-da2373cba211", "value": "24576:Y+gZboAJ2m3XCjvE6RTEYzaWA/N6Bd/m0KyTzVQ0UGZ:Y+MOuyj74+Ny9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354082, "uuid": "e50d5a7a-d2eb-4aa9-894a-ba83af130157", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354082, "uuid": "09380e44-4297-447a-b06b-817bb4d1d5b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69dd55b8-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "d9da73b4-196e-4d60-868e-3f6739fa8918", "comment": "Malware payload", "value": "6289a08e64ae2f4a6398344e4b88260b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "b8b38a88-c636-4a4b-a7c5-27215dc7738f", "comment": "Malware payload", "value": "dd4542199889295b6f04e0942ec8832cb88d19cbedfc00ca8eb752265942788c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354082, "uuid": "38339590-d661-467e-8db8-ee7144647523", "value": "T1B5D54B80FB489226E90B0F338CA30BA8B3555D46C6E4856F8708F36F15B15EB598FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354082, "uuid": "4f217feb-fe4e-4795-ad11-2cd32e8a8e71", "value": "24576:vImTx7mb2WX5Fi/LiYZTWU1i0+PnsxPxoOW9sOc1D5LUVVw+L:Xmb2WpFi/GYB13PxoOW9sOZL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354082, "uuid": "18267863-a7e7-46ac-8443-cc3151d8597e", "value": 2818210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354082, "uuid": "030e23f7-93f4-4c17-acb4-58fa4bcfae94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6be347b8-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354085, "uuid": "2fe67878-bad8-4477-9858-d47bbd6d3596", "comment": "Malware payload", "value": "71b3da196e1eec9eaa8463f6b910878e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354085, "uuid": "5be51451-add7-4aad-b545-35aae1fbb24b", "comment": "Malware payload", "value": "64162192104e74a06b59528009a3fced08f204a7d9e75d8f4b1594af2fef8053", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354085, "uuid": "1f439373-aefe-44dc-aad0-d8002d22e134", "value": "T1FBF47C5BFE6E3C43D2D7D37E9B4A83B1A22BB190D32350937581432C94C6AADCBB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354085, "uuid": "9c45112f-ea95-4bd0-bbed-5de73200fb3d", "value": "12288:cppyvdXbHIiFhEhVjk+egZcmAoq1O8w5Y9uAtEYNZ6e9W:cnQHHhOkz6cVUTYNQe9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354085, "uuid": "1eaf28a0-2edf-4860-9d30-b4f05a3c421a", "value": 787984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354085, "uuid": "ac31a8ca-adc9-4823-8d1d-c0c7384c041e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ca211e2-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "d3ae3b81-8795-488b-9a4e-a12a187257d1", "comment": "Malware payload", "value": "d35e1d83f753005fa495d14eacce8d69", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "8b6dd989-a0b8-4dac-805e-b61b7fc23353", "comment": "Malware payload", "value": "4bfd43906a0197031921c314fe28fe34fd1ecb301f66c9730ac037585f62b76c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354087, "uuid": "126b76b6-70e0-451b-8b05-91493813a53f", "value": "T12BF46C5BFE6E3C43D2D6D37E9B4A83B1A22BB190C32351937582432C94C669DCFB06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354087, "uuid": "85985641-9797-450b-b5e2-ebe0180bc641", "value": "12288:G/zvM1SRdoaLQ4yCQf1jK1SgcdeV6w5J9GDJv4hY9Y:ENRddQVf5IS/b1vQY9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354087, "uuid": "182a0856-f3d8-425e-9c8d-d52132b33347", "value": 788568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354087, "uuid": "e9d398bd-8a4d-466b-a721-583ab86a190a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cb095d6-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "e46b9a1f-3093-4ee7-bbb0-391010fee777", "comment": "Malware payload", "value": "0c2b465a001c940e9c9f993e403d8745", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "376f7e5b-7f40-4d8a-b456-e8810a31447a", "comment": "Malware payload", "value": "bf6e079a9fbf1316a2091126ac310900fcaca4c6f0ff3f67d4827a9eb601c8f4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354087, "uuid": "e7f12151-f58b-4146-b418-5ff4e2a2036f", "value": "T14C058D2AB2B3F17CD01BC03407DBCAA24535F47926212E7B26C4DA353D66CE62369F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354087, "uuid": "ef37145f-d61f-4612-90fc-931c92dd36a3", "value": "12288:Xk1UUYh6ddHx6KWNgph+ugAUy/kItQiK64qYay47MHX:01NYWWNgvRgAXkq04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354087, "uuid": "d24688f3-4f17-4dc3-96db-f646f5fa1578", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354087, "uuid": "745f877b-ef4a-4386-b849-9b723e2a7494", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d43873d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354088, "uuid": "77e97b71-d80d-4993-a76e-d134af373a23", "comment": "Malware payload", "value": "4f2ac39580ebb4e9fd56f2e79f699de4", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354088, "uuid": "1f88464a-419a-4777-b66a-ac6c501497b1", "comment": "Malware payload", "value": "882e0bf210abd584b556486a09df327a808de7f284752552f1c0b3d45bf7b191", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354088, "uuid": "d469f135-9db9-4c30-a5a7-dbae1851341c", "value": "T156F45B623B11DFA5D355D67009F3C7505AF525A20FE2408AB26CC3287E20A6D6E5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354088, "uuid": "6dd55dfe-b9cc-4d93-ab62-2c64c0169194", "value": "12288:YER2OE3aFTLDJ83sj4ZlGHn3CnYx8cICijbiDgphgaXOeD8zNYSN9VnjyY:YERw38V4ZlGeYSXCijbjXOGG9Vnjf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354088, "uuid": "6f84be51-3771-47b0-9da2-34c265621dde", "value": 761964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354088, "uuid": "a3ff9728-479e-4ead-938d-5fe9c25f60c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ffc3c9c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354092, "uuid": "90ccf3d0-0b5c-43fa-9a80-3eee5511cc3c", "comment": "Malware payload", "value": "efe27986735849546f0a362ba484a428", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354092, "uuid": "20a9af02-270c-4002-9da5-28733bbf4cc0", "comment": "Malware payload", "value": "108c9b18a4fae610e0de6aa513970e0c6a1bc6810e93eaafb538d1f7a172a1f3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354092, "uuid": "9aff12bf-56f7-434a-836d-3ca3a75a6bc6", "value": "T1FFD4AE1AF9447B07C8974275848FE428736BB28407533706394AE67A3D83ABDAF1D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354092, "uuid": "3a038a46-e73a-43cb-b07d-41a80b980fad", "value": "12288:6VN+jJTnfwf8gnd1utjtaWXyw+UJpaKXKw5WomjR/6mYxY:oN+1T40gnd1WjLCw+UJfXUlymYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354092, "uuid": "fed2165d-21bb-4848-a85f-3c81247eb2d7", "value": 649256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354092, "uuid": "ff22ff91-38c5-4cd8-b9e0-078381a154af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7033c18b-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "fd8f4899-67b5-4c27-b4fd-3639990aaac6", "comment": "Malware payload", "value": "4a229edfa220ffa534e22e1e7dcae838", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "8a33e4aa-fcec-4a14-9b2e-ab2f42fb6930", "comment": "Malware payload", "value": "6fd8efc92d595363d2f35657d5c6a86b3874c75014e4317d9beeed31576d9d52", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "1d03ad8b-e910-418b-922e-5b7ebb3eb1ed", "value": "T17F057C2EA2B3F17CD01BC03447DBCAB25532F07926212D7B26C4DA353D66DE22369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "502f2ae6-9cd4-4a9c-97c5-cb4f75e0ae7a", "value": "12288:OYEKOZVsd5H1kNgUUBEUzZvNotFtjXY1vDZay26ROHXfhr:5EdZ7Ngr+2WtFhXsT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354093, "uuid": "8ad36c0a-b513-4d26-97c7-f9b1d7025042", "value": 826136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "7727dde4-5ab4-4976-86e0-4b3b80845ea1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70578218-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "f815ce67-3882-4f76-a2ed-26e6ae3aba60", "comment": "Malware payload", "value": "425dbdd4f963e7b4b9446eedbf8fd610", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "99def83f-53c6-4b03-9138-822ade04b007", "comment": "Malware payload", "value": "16c8b7322f3204e8ac30be56a4bc82c364e313905ed1a2f9cdc06de70416bdc3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "76325cf3-3e21-4d9e-a0e8-4c999c7e57d9", "value": "T1BC058D2AB2B3F17CD01BC03407DBCAA24535F47525212DBB27C4DA353E66DE22369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "7b5cc5cd-4e27-4535-bbc7-785b1c105608", "value": "12288:cvXpX3Hd8FQKdAH/CIyxNgxWNZrP1aGbQsFNnCqRVay1QETyHX:0H98tRxNgMfrPzbD6qCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354093, "uuid": "3f6cef21-03cc-4131-b6d8-610e126325b3", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "410bb9e4-f28d-440f-acfe-6063b4ce7ae1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "707984a1-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "b10588e1-3c72-4ab4-a212-8d79a99bab28", "comment": "Malware payload", "value": "50726638d8b6c331b11e1d7e3967e326", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "9315466c-d443-4156-8424-155d927a6a8f", "comment": "Malware payload", "value": "6635ff226571d6bf2f0614587f634a632c68fb9fa6a651095c05c72dd122eca5", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "c47df210-bd15-4718-9738-d012eb57eabf", "value": "T149057D2AB2B3F17CD01BC03447DBCAA24535F47525222D7B26C4DA353E6ACE22369F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "f9751992-142b-4941-94e2-b9ab3adbe7c3", "value": "12288:PAWjxnjAxAGijdHHPn4GPNg9fovimFisG91cohooC6DJwjayV/RmHX:PhxjAWt3PNg1mimDG9Go46DgR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354093, "uuid": "5e96019c-c337-45d3-ad74-f006e975b037", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "750790d3-b2e5-4098-aa3a-baee059c0fe4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70a24a6f-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "40da0381-bb3d-41dd-82dc-f8cc3bd63cdd", "comment": "Malware payload", "value": "4ee072f13b11333331dd16eb3a66ee13", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "b760b582-ed63-4c40-adf9-b9108ee32694", "comment": "Malware payload", "value": "99ac3b7c81ae90fd87a0c6fd7bf0aaf3d77f72cd736cf077912c744d0dcc2ff8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "3ee81ed1-0ede-4129-8502-089349cabd93", "value": "T1FDF46C223711DFA5D355D67004F3C7905AF625A20EE2548AB26CC3287E21A2D6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "ad1fefa6-e390-4d13-8fc6-c3c350380074", "value": "12288:NuiObb5EBcw04rQR4KZGytPXkxzed0C5D5Kgpygm58D/3ASHWVKj+z:YiOeBBg4KZG0Px5D5o5DGWVKja", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354093, "uuid": "f9c76ab0-061c-472f-b57a-4cc4797f0765", "value": 763036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "636b4972-59f3-4284-9e60-ce27260f5b74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "720a7717-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "af6a4523-2774-4553-a250-f17a6b7fc6ed", "comment": "Malware payload", "value": "f1d2540707724596f749ba9e61daffe5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "df165994-fcb6-4879-9d39-2499a4ed2e38", "comment": "Malware payload", "value": "2e347956fe3cc3cb3e7960d13381484e2997d31c791c375d77faa69ed211350c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "08d32c4b-3177-49a7-9fdb-60d3cbe96a53", "value": "T1ADF46C5BFE6E3843E2D6D33E9B4A83B1A22BB190D32351933581432C94C6ADDCF716", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "4c83fb70-e004-43c2-9c96-64d4df602808", "value": "12288:icUvpg7801UHRGledT6DHbX3CWLCg3P6/gJLw50TBE44y6tgVu:7PIXH6edT6DHLyuCExJhY9tgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354096, "uuid": "41d9f70a-06e3-4037-af34-041e0f5bdedf", "value": 787544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "c488321f-6d1c-49f2-864e-ec7b2c48d647", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72320f54-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "fc881209-a63a-4761-81b8-99e2e20ae3cd", "comment": "Malware payload", "value": "813797cb98a40e92b4e977e3c5dbac79", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "735db63c-9a79-469d-99f5-516700e10a32", "comment": "Malware payload", "value": "c9672964fb58f8cfecc2114490af228fbadf2e90dfcf0ff60d92847901679305", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "878791a6-3f1f-4f7d-b71f-591f1f8e1bd5", "value": "T1E8F46C5BFD6E3C43E2D6D37E9B4A83B1622BB190C32350937581432C94C6AADCFB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "b6a411a3-651a-4b24-9546-fda491718c1d", "value": "12288:dqqvNgOdTQtpcdw5vIby6BDjYSMtcYWw5l9om9jiNn9E:UkQpvvJwDMS5mjGn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354096, "uuid": "ca7c3af3-0420-40c8-b416-7ed123b1a402", "value": 788416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "3770500f-ba0c-4fe3-a507-632ab4eaeafd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73cfa6e1-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354099, "uuid": "7703636e-6141-4ab2-84f6-4479f22d76a7", "comment": "Malware payload", "value": "83d96846e9d6da727c8ad48cfc14a6f8", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354099, "uuid": "1762cc85-fd49-4f56-b86c-dd3e8d6561cd", "comment": "Malware payload", "value": "b1787d7caea546bfc263afcef9479169052dd2c87cbb6b5d9f788f795fec8cd9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354099, "uuid": "eb74f5db-b98c-4027-9cec-e6dfd8a664e7", "value": "T1C5F46C5BFD6E3C43D2D7D33E9B4A83B1A22BB190C22350937581432CD4C6AADCB716", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354099, "uuid": "f7244578-1129-459e-a370-ea5ba0278fdc", "value": "12288:soZv1RivW83Y2ZP8EdawR0ckXMOPcsw5+9VedWj9zn9FQ:JqZYr8aunk8uWWjhn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354099, "uuid": "6954e6f7-f45d-40dd-98d1-e3ab3212191c", "value": 788944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354099, "uuid": "b20177ae-4022-4ae1-9dcb-2d0812b91ab0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "781dd29f-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "72283810-226c-42af-b76c-ea3a7e8af040", "comment": "Malware payload", "value": "0f4466ed1266a22aa163589de7a40d50", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "e9644f46-7f37-473d-bc53-ab32c866f37a", "comment": "Malware payload", "value": "821b5cc7b6a2d2f40e7bb2ec054f763efcac7962aaa8f6274c8119c78a0a7b3d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354106, "uuid": "e5fb4b03-8e75-4d11-9f5e-6ae26ac4d24f", "value": "T1B3054B42BB1C4563C8470EF1693F5396F725794341F9922A370E9B673621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354106, "uuid": "63bec29b-29b8-44bc-b7ec-d5bc07e7bf51", "value": "12288:gB0CJY/9xS6ANGq234JXB0M/E4394ctHLipyMj8KkKV/DD2yoDmI0Nldj:gSCJl6AGq2IxBDn94ctHC8KkKV2qIClh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354106, "uuid": "8e6e1e04-c9f0-48e1-914e-61fdae489baa", "value": 857044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354106, "uuid": "f4601234-0bed-4114-8b01-4f60ffb6e892", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d1bbb9e-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "c8f8b946-261f-4f6d-a73c-aa307036af23", "comment": "Malware payload", "value": "c560440ef37371f9607cd5ec6da50695", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "60580109-f41e-4ccb-99a7-4f20104d4855", "comment": "Malware payload", "value": "527d808a719c039fb0a581ec9772fa3c7e4d2256e6d1ba841cd373c33f5f5022", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354114, "uuid": "72adcede-0664-440d-874b-0a949df4edec", "value": "T180055B42BB1C4563C9470EF1293F5395F7257A4341F9922A370E97273622E3ADAC37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354114, "uuid": "40ab5815-f4b0-4f2f-b82f-cb3b4d3fa8bf", "value": "24576:57lG/Xh8QEPtfyKKsN3p8a6LzKhm8WTJ52:57lGfPEPpKA58DzKvW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354114, "uuid": "37b3daa8-06fd-4826-b0ac-f064e57ac694", "value": 857572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354114, "uuid": "3bb2aebb-1a75-4d2a-8f1b-1b8b3d78c69a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7da4c91d-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "ff70fe26-b4fe-47e9-b057-f77b9f713f2a", "comment": "Malware payload", "value": "98594d2f7fc8270afa727ec47fec5eed", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "a4680fed-ac23-4c12-a6d5-8acd80e8dd6a", "comment": "Malware payload", "value": "e281f6b0cb7ba8b2690dec66e7057d2c1b62760176b34abe0ea91c564bd1b545", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354115, "uuid": "ee86faf5-01f3-4c88-9331-94f53b3a6805", "value": "T15AD49D29F8447B17C89B9274808FE028737BB285575273063846E6793E82B7DAF1D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354115, "uuid": "962f0e7f-e653-43e7-84ce-9765c3e082d7", "value": "12288:gn2z+g2TXVNirNMjP4bSsurjmjcEepqw5npr+FhejgJZld:S2z+7XVgNMjPXs8KgEen3j0Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354115, "uuid": "7957728e-6bec-4b4f-99c9-cf60137105d8", "value": 653848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354115, "uuid": "99a29abe-8d41-420e-9d9e-bef070f1ad61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e63c7d6-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354116, "uuid": "c8178499-ea1b-4374-81b5-98e35f73b543", "comment": "Malware payload", "value": "cd8b55af93999ed1258f27cd1972f7ae", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354116, "uuid": "28460090-72c9-46d9-a765-0b1dbcbe88af", "comment": "Malware payload", "value": "185bcd726956b48fd8241715510c11175fffc751733e51b0ca5d4c87604d4a9b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354116, "uuid": "5f63aac2-ebd1-4446-ba78-83aeb70ed928", "value": "T111F46C5AFD6E3C43D2D6D37E9B4E83B1622BB190C32350937582432CA5C6AADCF716", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354116, "uuid": "64ce15b3-06e7-4daa-9709-007b9f5eae97", "value": "12288:8wsfvMjNOp583BDS/lGnn8sDS+cVIqTgw5l9mApdgNsBe9y:8RUO43B8GnLS+qwAYNme9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354116, "uuid": "7c853d31-f926-4622-8800-dd9aa7aa5c00", "value": 787112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354116, "uuid": "1df010ed-4c20-40aa-9ce5-071fd7b115c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f869854-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "76537588-487f-4c62-a732-e6efd90c5849", "comment": "Malware payload", "value": "137b6e726b03e9f94fb875c791a5bb23", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "f1733ceb-ad8e-4317-ae1a-949fe13f7120", "comment": "Malware payload", "value": "fc2f530c9081d810494eaa527da94ca414f2c3b3da8e91d48b3c30b5f635245d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354118, "uuid": "8bd5689f-3c72-4e55-bfa2-49182099bab8", "value": "T114054B42FB1C4523C9470EF1297F5395F725BA4341F9922A370E97672622E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354118, "uuid": "3b3afc16-f23b-4dd5-aaf0-cd3fc9f544e3", "value": "24576:ZnBNHuABMvS2PBbnN5ywuu/pd3zsnU095D:ZnBNOVvtBbNswukd3zsnUs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354118, "uuid": "ef12ca1e-78cd-47ba-9238-fc0a8d9d67a4", "value": 857300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354118, "uuid": "85b5783a-0070-4ad6-97bc-8b630aa86d89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f8feb4c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "2d7b8422-55c4-49d8-8840-8b64988254e5", "comment": "Malware payload", "value": "f38c0f6b9c58ba02ffa7e628ec912ecb", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "97712373-c781-4a20-9dda-6ff6b2b909e0", "comment": "Malware payload", "value": "f20a4cb6ba4a79f2a73eb058518d4a6b4bcf2a99461af48d76fcdce45f372938", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354118, "uuid": "2566d925-8bbe-4875-81b3-fb644f1270d0", "value": "T122D4AD29F8047B07C8979279808FE428736BB245075233163846EA797E83B7DAF5D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354118, "uuid": "8bd6ced7-9e9e-4498-8481-2a32eadae15d", "value": "12288:lS60+bihhf1JrGlyI+MigncsdBZzZcroMw5npRXyriwZkDWlY:s60+qhf/GlyI+zgnJjLcroVeZMWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354118, "uuid": "5c5f0fa9-713d-46a4-a8fe-e437a9ee606a", "value": 648848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354118, "uuid": "3a0305d6-565a-4507-af55-d03b43025763", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fe9cb6c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "a356e44e-0fa8-45a2-b094-d6465a6d060a", "comment": "Malware payload", "value": "7eb12426feecdaa64a3132f3a9d283de", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "70cb5730-4bd0-4348-92ea-3bc140e2c19a", "comment": "Malware payload", "value": "1ad9dd10f07666b6534408891c5ed129134adae7ebb65000adf1b835337caae9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354119, "uuid": "2dc41d78-69c8-4451-9944-9d41735b3df5", "value": "T1C8C59E06FC959E2BCA2E12B2896106DC2738ED446F82931B5E18F67C3CFF285AD513", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354119, "uuid": "9d147860-1df3-44a5-b0e5-881930ca3b3b", "value": "24576:9HtQj/XOg0s9pa775ucgTNphM2dnE4X8VL/rT+V2IwP/IN8Gv+kA6a4e:cj2Ya76YRTIix4e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354119, "uuid": "3e815e88-b6dd-43c6-baf4-fd60d09fd3ac", "value": 2556066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354119, "uuid": "c05da08a-c13d-4874-ad8e-ac61d26bbb56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d671158-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "2e2ef086-32ef-4e64-adbe-1732fcdc6f56", "comment": "Malware payload", "value": "771698c01986708ff65c1aaa68bea265", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "8cfcaa6b-d5b8-4c1e-9cfb-7a31f740c8ba", "comment": "Malware payload", "value": "353679288a9fcc829b4ac3eb0441de3588f5d4d5cb63bb6c4c5ab559abce2198", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354142, "uuid": "0418107b-79ed-4d9a-afed-166ba5e94ded", "value": "T16FF45C07EF505FEBC49FCD31492EC30701EDD4834AD2662A71FC8B8CBA9965A4AD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354142, "uuid": "b461ce23-7c7c-4b7b-93ff-7628da1697d5", "value": "12288:XQYzzwd8w5ngtnYfoqCGjlC1fkkwjKfoSekmLwB4h+N6I0XT+fMeRUsz9yRWVIqJ:cz5nubfkplvgFpLuugnh72G9Vnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354142, "uuid": "995be681-5052-4b22-b964-90617b879761", "value": 761964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354142, "uuid": "3004e135-f810-4769-af36-7b0797284546", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e9f2537-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "4ec92d50-c30f-482b-991e-9d7ff9d5a8c1", "comment": "Malware payload", "value": "cca617e842e68c3461b3642e00dc37f0", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8c3e202c-6cb1-4875-a669-c5eaea390da0", "comment": "Malware payload", "value": "7fafc231f542d866e206f600d1c3a5d0b7ff2a99e877444509fce881b432c867", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354144, "uuid": "9cf81176-bfbd-414b-9837-4d090d92f634", "value": "T129054B42BB1C4563C9470EF1193F5395F7657A4341F9A22A370E9B273621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354144, "uuid": "16d29fae-2aa1-4f5b-aaba-04f551b78d67", "value": "12288:h7NNNbKjCBeD0QsXv4eJ6/g/+itH41zR+ipyMfxrEHlRenUP0DSIrN5Q8:hpNNZewQsXgC6gFH41z5xEHlReTWIJ59", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354144, "uuid": "ab9d55f4-7aa5-4edf-803a-9b5f87175a52", "value": 857536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354144, "uuid": "77f2c9ef-0feb-4204-b064-2e865751cca3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c5d2990-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "b3ddd04c-d125-4fba-8109-86db747bf083", "comment": "Malware payload", "value": "38cf2b71f24092dd8c563a4a6b81f2ed", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "f133554a-1f7c-482d-b690-d4ad9873af41", "comment": "Malware payload", "value": "39c547a11826372209aff3abaa36517026f075922f58b8ebf5523ca1995b36ad", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354167, "uuid": "9bcb0766-93ff-4c7b-8c40-b4d0f373fb28", "value": "T175155B42FB1C4463C9470EF0593F57D6F7257A4241F9922A370EAB672621E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354167, "uuid": "8ac66fc9-212b-4a51-a59e-b3aa23536117", "value": "24576:Akfw2w71NMDrcOAFisbv5L9a6mahw7yjOF4FmE+:AYw2w5KHrAF3vl9a6BcyjOFk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354167, "uuid": "d091369f-0369-4a0f-b70d-2ad70afe23bb", "value": 928568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354167, "uuid": "4623c695-c257-4a4f-bd77-d719e94bc815", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cee541c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "e8e69872-2523-4d18-8cc4-dd553078d362", "comment": "Malware payload", "value": "9b2e769b400a59decadb490840c2ef6b", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "8285bdfd-f471-4bcc-9b8d-b16f31e9508d", "comment": "Malware payload", "value": "49d19c88036e9f59548f77ae78800257c513b12c37929ea3069121e018319da3", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354168, "uuid": "e8326d58-51ee-40da-b78b-9956bbdf40f1", "value": "T1ABF46B623711DFA5E355D6700CF3C6508AF125A30BE24496B2ACC7287A11A6E6D1FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354168, "uuid": "680c3815-8b71-4dea-b0be-6435c514e3e1", "value": "12288:BKQiH884TvUnw49CGcLB7JYHYIAp7mJCtWgpgVOUSLaw9n2ptVxbXW:oQi54/49CGIBAJCt1UBwp6tVxbG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354168, "uuid": "4b2d737c-4ba0-40d3-b9e9-8bbc7b18e0c3", "value": 762432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354168, "uuid": "cb95576b-bcc6-421f-8c9e-425b30b87247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d0c0edf-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "0dc802a4-22a9-4d3f-9a0a-acbb69403c39", "comment": "Malware payload", "value": "c44d24cef52e7a81c851fcdc78fb4097", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "fef77e09-0865-49c7-8138-240c5767c63b", "comment": "Malware payload", "value": "f40bd1f31128ff84c09081510ae7a168f8035a375029dca95495f2eab4a5b55d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354168, "uuid": "a6138c6a-635b-48d0-92ce-6140504654f3", "value": "T19ED4AD29F9447B07C89752B4808FE428732BB2841752370A2846E67D7D83B7DAF5E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354168, "uuid": "06969c9d-249d-4b9b-aa15-df03d9127b45", "value": "12288:jK4+eERbwLjabhXF4fPlyXmAoaI2HOw5KpHZCNZZp4WlW:jK4+FRgabhXF6PlM1o52HKQHZCWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354168, "uuid": "f5909f95-8ae0-4874-aaad-7797268dc5db", "value": 653664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354168, "uuid": "5455fd1e-97c9-48fb-9a5c-3671d6517536", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a4e23c-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354174, "uuid": "cdc36a69-7aec-450e-826a-17413a0f8787", "comment": "Malware payload", "value": "0e4d0d557c0fa195071e7afc3b6a593f", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354174, "uuid": "1e4f2ac4-7daa-4489-9138-15915d9e7d40", "comment": "Malware payload", "value": "b653d9f5e5a8225c10a0c54cb86c8d52125ec9efda16c87178dcc8d72fa400d8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354174, "uuid": "ab9c711f-152c-4920-9bac-cbcfd5f8ea09", "value": "T105F45B227711DFA5D355D67009F3C6904AF625A20EE2508AB26CC3287E2172D6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354174, "uuid": "35573620-4146-4a6f-8d8d-acd4647dad25", "value": "12288:1BpnoZkM3bUNgil7eThb4M7GevGdEyXSO5dgphga+nhypiJ/FSv2V0j27:1Bpnc3L4M7GaGdLSO5u+nhycFM2V0jI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354174, "uuid": "277ab282-7218-4453-b213-faed4e58d682", "value": 762904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354174, "uuid": "63079f18-b1ef-4103-bef6-e2d64c156fc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4404f65-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "21cb9e8b-dc96-43d9-837c-169c4f4b4dc1", "comment": "Malware payload", "value": "8fe9d552c8b4b211e2f61a011a137c69", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "0e133f26-0e88-4b12-b82d-90f4daa34fab", "comment": "Malware payload", "value": "115918a43fb772036d6c16bcfd30394663db665d5161a46744a5ecc42a179b84", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354180, "uuid": "e4169336-a64d-4215-afda-9ebd0488a6bb", "value": "T12C055B46FB1C4523C9470EF1193F53D5F7257A4341F8922A370E9B272662E3ADA873", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354180, "uuid": "ce9226b7-aa23-4042-8563-2f981934c3c6", "value": "12288:0oEVRQiyrhrg8I0gI0eaEILwLu6M8HytIippMmi0QNZUiiipDKwfN5Wp:0nVRagp0gIBjI4E8Hytxi0QNZUQuwF5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354180, "uuid": "cea8d019-b664-48c5-930c-fdc496ec9b93", "value": 857748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354180, "uuid": "4e14c55a-373d-4fe8-a8df-d85d452e495a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a440ec29-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "5b3dfb85-a809-4266-84e0-99d5e56b6716", "comment": "Malware payload", "value": "64d59b167a82617232327b660592f432", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a2d206d5-bee7-447c-9a5b-6db228de17ae", "comment": "Malware payload", "value": "cb4a85b8268ad8980f419b8804abcacce635f2c81abee0a8991b658bd04b6856", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354180, "uuid": "47e85832-9c3d-4d5d-9720-e56650d5cd25", "value": "T1D4F46C227711DFA1E355D63008F3C6905AF621A206E2548A72BDC7287E11A2D6D6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354180, "uuid": "0186bf46-d2c6-47c1-9aea-e4cae6590233", "value": "12288:QW0IPvfiquLeBJ4O0GL2g6jH1Yj89+gpgVyb+SRblc2ThV+jve:b0Ifiw4O0GLh6RYjiH+GiYhV+jm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354180, "uuid": "843c20a3-34eb-44bf-a2b7-b3de89462ef9", "value": 762496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354180, "uuid": "7574af7f-9da6-4bcb-86ce-cbb12972b04e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa0356ac-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354190, "uuid": "da55ac3b-9ddb-4952-9459-e05ad1783719", "comment": "Malware payload", "value": "c0ae3a539b96caa5f96fc94203e2e133", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354190, "uuid": "75add6b2-1bd2-43fa-baf3-a64655d42080", "comment": "Malware payload", "value": "9c4133df17f65e4414a68fb94861cff9ee31ec2316312467f1359a315877cd67", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354190, "uuid": "9129453f-b0db-449e-8e85-07f05422f9b1", "value": "T147055B42FB1C4563C9470EF1293F43D5F7257A4341F9922A370E9B672622E3ADA837", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354190, "uuid": "29f96168-d10a-4354-a17e-6f91894cfc82", "value": "12288:jnmCgqvxo/g+4DEIgBPt4TFBJzmgyo1zhipbj2KrkFKJedg/3zwLoNlxx:jmCgXgnDEjJtumgyo1z3KrkFKAsEL+lb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354190, "uuid": "773dfcaa-f9bd-43ff-9f69-b7a9e77cf722", "value": 857344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354190, "uuid": "e267862b-140b-46ab-b73a-678346ceec42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac6399c5-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354194, "uuid": "cf1bb8f3-bd3e-4a8e-beb1-c609c8961bba", "comment": "Malware payload", "value": "6f4914ba7dcce9b36ef00fc4b10539f4", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354194, "uuid": "574989b6-e3c0-4bdc-a67b-ef1afb72aaee", "comment": "Malware payload", "value": "12dbfad7e8d9f342a1179e984081ff4bb111f9809f7cc108b527b6bd5c48a86f", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354194, "uuid": "1a10d117-d650-4de1-ac4d-2a10d61cd81a", "value": "T1B7B56C81FBC89125D84B0B3348A30BA8B3515D46D6E4892F970DB77F16B26FE590BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354194, "uuid": "de1c0520-998c-4818-8bf5-40631fe28fee", "value": "24576:uIZi8QaeOwAvckMIiG+ZCh0+snsxykYI1QDoZQXXRj8SRyv:G8Qalvhg4ykYI1QzA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354194, "uuid": "04a758b4-303a-47d7-9758-1e93bc00f0ca", "value": 2359458, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354194, "uuid": "65599163-f6c7-448a-a13f-32261efb7661", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1d70541-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354203, "uuid": "718fb248-2164-46b3-af27-ae8756257d1d", "comment": "Malware payload", "value": "bbaec338c9c5411e28a1ad9cc0cb3f96", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354203, "uuid": "65a07d92-c653-403a-8f6f-39f8a2bff42e", "comment": "Malware payload", "value": "fabb5d43cde4e55316f2df14822be9da943e99f21cffeb13a99f3db5e41e6748", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354203, "uuid": "89894eef-6412-4eb4-bd26-074af21f4fe3", "value": "T18BF46C227711DFA1D395D67009F3C6905AF621A20EE25486B26CC3287E2076D6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354203, "uuid": "454b7bf5-3a0c-4a86-8524-ce1356a6ec06", "value": "12288:bt4mLioLU+zcuvsIfu4FIGRwq8ccfXCnMnylgphga0Jj0naURSe4V0jvT:5jLG+W4FIGiq8ciCnML0CDRh4V0j7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354203, "uuid": "0a052780-815f-44f3-982e-26dc49af36b1", "value": 762792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354203, "uuid": "f253a2e3-e43c-4c42-8095-c8f882cf2775", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2542f88-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "d5119e78-7038-4b7a-b920-b7bbee39a7d9", "comment": "Malware payload", "value": "03f1a5bad3c4fc2711bd0d8fbe8512b7", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "7daeafe3-6cbc-426b-a491-ccebc204a9b4", "comment": "Malware payload", "value": "da05f7346be39d09b7e08c9cdcd072463cf551952796c82a7fb9a117567b11f8", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354204, "uuid": "fb83bd12-6089-49e3-a3c2-64022abbcc43", "value": "T15ED4AE29F9047B07C89B9274849FE018732BB28507523706394AE6793D83BBDAF1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354204, "uuid": "b75a534f-f180-410f-922c-61fde2876482", "value": "12288:Io7+N8An5tx/n884ecF7CUxzW3GLsTplYinw5WosacrnK/6zYx3:b7+mAPx/n884PF79w3GgTYifaVyzYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354204, "uuid": "4469556b-85e4-4271-aba3-60d75552c3b2", "value": 649328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354204, "uuid": "588320cc-b969-43e7-8dd9-d319cc1b3061", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ae9d78-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "05162795-bfd8-41a2-b20b-2360c02d90b4", "comment": "Malware payload", "value": "0508dfa4f5c1ffe3a54ee7dad895b102", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "7ea030df-60ca-4764-81b4-6a7e7db294d3", "comment": "Malware payload", "value": "b7b2dfd315cf2576fe7fa8199b944e035e3eaefb6d948dbb09cef1bc41232370", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354206, "uuid": "6ea6b969-2e81-4a4d-9fa3-4ff67a4e7cef", "value": "T19DF46C07FF805FEBC49FCD31492EC30600EDD4878AD1662A71FC4B8CBA9965A4AD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354206, "uuid": "30784da1-6186-4e31-8a5a-a3dbc5fe4986", "value": "12288:+I9oGZppUwVZoVBlB6Yg7jsSwfrDN1ka8ecVJw8C6vxiu6pI2j1oo5KrYx6vFiWe:Y6VZS/frA4MbLe/EcxjrVyuvVwj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354206, "uuid": "816c2cb0-cc5c-4370-9268-093faf9e38fb", "value": 763300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354206, "uuid": "4e9f2b5d-91f1-486c-bf46-a05562da893a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4e32aeb-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "e0c574e1-881c-484a-a56e-edec53370d19", "comment": "Malware payload", "value": "035e5f967afa78c3b3b3d3b17d94f597", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "4d4aba03-ef84-40a5-a65c-e069cc6758ee", "comment": "Malware payload", "value": "483da5be13c6fa89efde813e58d25ee69437cf7365d91078ee15ee481cd682c1", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354208, "uuid": "42c94f6b-9bf2-4539-b31b-a0841f63b927", "value": "T19AD49D19F8447B17C89B9274848FE428736BB284075233063849E6793D83BBEAF5D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354208, "uuid": "29742b58-16aa-4d36-acac-4d1b3c1abb83", "value": "12288:s+2C5LfvLpCK7vq08/Lb5OmBjVa0lntw5WoJVYYYY4YYYYeiYYFYCYYYYYYaYsYn:s+f5npCK7vH8v0mBjV5nEO3DYl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354208, "uuid": "4d9374d4-e2f3-49f0-bbd6-7f01127006f7", "value": 648832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354208, "uuid": "ca835810-6b61-468a-83ad-0d0f29e9be29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be93448a-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "c4ba6f34-85ac-44c8-a653-b9532c643c83", "comment": "Malware payload", "value": "ac79fe7e0e058e2c942e608283499502", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "d9cb487a-785d-4832-95b0-6a2c40311e6a", "comment": "Malware payload", "value": "a430d48580b1ffe87ce004b120eba19647c3bccf41a737a63dbfd13225bfc40d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354224, "uuid": "e907a97f-fe1e-490b-8ff6-ae81430c55f6", "value": "T177D49D29F9447B07C89B9274848FE424732BB284175237063846E67D7D83ABDAF2D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354224, "uuid": "27f964db-2872-4a73-91f7-6dcd5874c7f7", "value": "12288:twG+a9VeP8+yx1uq7U4mADorOxz9jw5spxtvB/q8Wl0:twG+QVt+yx1uEUn4orAz9nr/RWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354224, "uuid": "ab16ce60-d5af-4652-97c4-8800731e2b60", "value": 654008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354224, "uuid": "ceb34884-5817-49be-afa9-f363a1e62a06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c35552c9-3092-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775354232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "3cc42dd2-0272-44ac-b6f9-e671925ec5a8", "comment": "Malware payload", "value": "61950bc688702686cd996ef3bd98477d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "708ed26f-5542-4e91-b16e-95ca6e077cf9", "comment": "Malware payload", "value": "c1875fa06a243de2dbf95597d1898b57ba4b6810d1bab4b9e30913e2db95a0f7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354232, "uuid": "e19595fc-d2a1-4078-933f-3b5377e89920", "value": "T116055B42BB1C4523C9470EF1693F5395F7257A4341F8922A371E9B273661E3ADAC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354232, "uuid": "0177eb12-a024-4f9f-95eb-169729737a14", "value": "12288:FBCjmvs0iFmD/HMhgkJFGDKevQMi9woyXip7MHQgKlbAuL8H1aI0NlZz:FUjmUoPMhgu0D/a9woylQgKlbA50IClB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354232, "uuid": "790df3d7-4aec-4aaa-ab7d-86f687ff2398", "value": 857408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354232, "uuid": "3a1a986f-ac8d-42db-b113-bb84b642e6f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c0e57c0-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355804, "uuid": "057fb764-5a7b-4e23-a632-d06eb4f18269", "comment": "Malware payload (Mirai)", "value": "9c39fdece6bfb638b731abe19bfd347e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355804, "uuid": "13ba7b50-4955-4ea0-a6e3-5f341156876d", "comment": "Malware payload (Mirai)", "value": "2f898a1c2de250663f406d5f0d7001e6d904c2269075cce4802b7dda8ee583f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355804, "uuid": "a66195a1-350b-4914-b13a-0295a945458e", "value": "T1B7E23AC0A403D8F4EE2542752573F773AB7AB47E212DD997D3ADD636B881600A9033", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355804, "uuid": "5a940a9a-858e-41dc-bc5c-4d9cf2537c40", "value": "768:mAypuTPDCuChC6uSGbJ9TPWntxhrb/qIhdfNNyvem9iULZ2:mAypuTPDCuChClSu9Tuntxhvyr9iyZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355804, "uuid": "a131d6ff-7b36-4819-9cd3-fb4917170ff2", "value": 33932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355804, "uuid": "da9dcd51-2519-4e52-a084-1299a48159f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f36240-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355852, "uuid": "28638b5e-51cc-4ded-966e-9fad51af86d3", "comment": "Malware payload (Mirai)", "value": "92df85a376cde334a134007a695e7455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355852, "uuid": "af903c0d-0060-4db6-afba-8a563f1221aa", "comment": "Malware payload (Mirai)", "value": "137051184f74bd7c7189f6901fb924865fa518b3e1ee9358f8b337ef22f36b63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355852, "uuid": "41a6f03e-1463-4f4d-acc1-96ba659d0f96", "value": "T109133A31A9762E17C4D0A8BA61F70728B2F2065F66E8CB5E7D730D4EEF21A4065132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355852, "uuid": "9d2e621b-fbf2-4643-861b-f19be92e98be", "value": "768:n8oV1q9LtuTLW55TmNgc58la281dk3O+YDNYl2TC:n8eSLtuTLg8gcWldrYq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355852, "uuid": "5750cbab-cd63-457d-b435-7bc5939d59cb", "value": 42304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355852, "uuid": "8b9c00f1-5bd9-4615-94f1-296c6f36a275", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f5c916-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775355852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355852, "uuid": "e42f06b4-d02d-40ed-8ac6-13b8f58eaa39", "comment": "Malware payload", "value": "e3648bfcfa9a0293569edb1fe3a2e892", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355852, "uuid": "fab544bf-53e7-4418-ad6a-7f2f9b7f8029", "comment": "Malware payload", "value": "9c07e5dd9a07a5d8c6b3029adebac8e9d7a7a66dd2ab2d50ce35767ad4277e74", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355852, "uuid": "72187f3b-559f-417e-bad4-934bfe91d613", "value": "T1C4E2E782B882562BC2E4537AFA6F418E3365B3E8D2CF761BD8115F107B8952F4D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355852, "uuid": "05afe4f1-2240-4a60-86ce-e7df39b81504", "value": "384:Fwo8cvLs8xAtZ2jhzqARE7/rEbdxN52OzqtyIWs58u5cYzGmnPdFZLwpiC5xvXzE:ecI8xwchzqAE7/yHNLKt5cYTPupTvF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355852, "uuid": "d061f118-c042-4369-915c-7dd132e0a281", "value": 32120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355852, "uuid": "ba9937b4-4be8-4a26-ab9a-20282f38b34c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aab5d363-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355909, "uuid": "74d4fc00-cac2-4aed-a58b-0833e1436b08", "comment": "Malware payload (Mirai)", "value": "823e524f8906b711663fa4d1046fb7a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355909, "uuid": "713ced80-c43b-439e-8913-c4b1886e3c9e", "comment": "Malware payload (Mirai)", "value": "2ae649c9a9bc6f224d414f581a4305a61d55c3aadfa28bc1dbbcb099116bec1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355909, "uuid": "93e884e8-ee29-447c-885e-50653c8bbda8", "value": "T1C433C402BB650EF7DCEBCC3346BA1B1034CC681E62E92B363534C95DB50B65B16E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355909, "uuid": "71c7a07c-c189-4b0d-9a59-28929dafae37", "value": "768:iOLFOcY22xG5XuU/TCKTTJishe5beeZez9BtZ8ycXiLhYXI:iOLFDY20G5XuU+dKEbnZI7Z8yvY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355909, "uuid": "ed6145ab-dd90-45df-b2ab-595443d6cc86", "value": 52380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355909, "uuid": "2ed07223-2fa3-4fae-9f2e-3a6b009fe95e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab21a65b-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355909, "uuid": "787d8092-2da2-48b1-93fe-b61c553e128c", "comment": "Malware payload (Mirai)", "value": "a39fadd87e9382199e7b7b663d52ab06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355909, "uuid": "415f392c-013e-47d9-8d9f-164f6356ec00", "comment": "Malware payload (Mirai)", "value": "cd1d12ec166c3f072cf53ac19acf355086a17d78bb03021aaf480ca4d9a2e035", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355909, "uuid": "2ff040c9-5fd0-4614-b328-def8a8982c9c", "value": "T19FF22C52321C0A5BC46766742A3F16E093BFBD9130E8F688654F9B9A8535E3711C2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355909, "uuid": "9d05fb57-d399-4455-ac7a-94994fbf4894", "value": "768:YfWE1T/fnRRS1RD3IUQ8holfrjzhtNDmkN:9EZ/Pg9Iv8yzhtNhN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355909, "uuid": "df472041-f11b-49a1-9041-a7ed3d8b20f2", "value": 36916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355909, "uuid": "553c65ca-846c-4397-83f0-b09e82a9ae13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab2efbda-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "8d49187f-8fe4-4a8a-9aeb-568459570f8c", "comment": "Malware payload (Mirai)", "value": "0870d393e4a1975bc1bf989d44dff98f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "e0e708a0-4362-4877-945d-5926af0d5688", "comment": "Malware payload (Mirai)", "value": "828cb431f87445fb01189cbd608f7b260aea91579ba6386005f32ca2c6996825", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "26ffb3a1-45f6-415c-8590-f28d8e564e43", "value": "T1CAE25B77C52D6E94D284C274F8315E782F63F04982671FBB5B8A89A68043DACF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "e7251227-37b6-4708-8304-1064ffcb467e", "value": "768:aLaiwtg3PvLHWeyeLHUeSLXk/f81fmEC5oK6/z/k:aLaiwtgDWFuzSbkO5K4/k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355910, "uuid": "8f22c0f7-6309-4289-80d6-d67fd81acba1", "value": 34100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "25293efd-4ac6-4f78-848b-303136f4e3f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3809b5-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "3e03851a-4c2e-4782-a918-74dc4fca62f3", "comment": "Malware payload (Mirai)", "value": "475e658cdef2db65469cfc9948fbdca5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "d90645e6-d5e4-4e06-b54f-959eb9fe8458", "comment": "Malware payload (Mirai)", "value": "3c6ca359fde5e6228369a9bffd54ebdc7a8ceed0006fef68255aa0ca21883ccb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "4f221a87-ead5-4159-8b6d-f8a6e1a37d09", "value": "T1B70319A5F4029C2CF90FEA7E98124A09F571774651830B3627ABFE536D332994D32E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "79bca9f2-326a-4cbd-9d6c-7da0638189c4", "value": "768:LZYeeNWbD8DkUmyMw5CI8iRXHWTTYkjYGIlx:L6eMWImyX5CI8EmT8kMGo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355910, "uuid": "0d9ceab1-633f-4175-97b9-3f888a33240f", "value": 38436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "dd6c193a-84cd-499f-9b27-1fbc2d1ed887", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab389f22-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775355910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "930281fd-e44f-4240-942d-d4469587887a", "comment": "Malware payload", "value": "69d01740607121233600096f32e652cd", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "3c9243eb-0982-4683-b1c0-80f375166061", "comment": "Malware payload", "value": "6cbff1d0f0ded1dc307c034efeb7f393b1d7a464a212f01ab906daaab01e72a2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "863ae0bc-a0d4-424d-a23c-d0edb76fd833", "value": "T1FD03E581B9815A17CAE413BBF66E41CE376567A8E2DF33079D222F10778AD2F0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "3a290576-eefa-4001-a8ca-d7617baeb765", "value": "768:YC/MSnxqmssbK5wOhHb0XEM6RMi7ZkBPq7xnn:ZMKxDsfb0XpBP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355910, "uuid": "b2c17728-8f2b-422a-8a75-ec7eda9852d1", "value": 38200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "94c84dd8-88b4-4699-9daa-ec5af1411785", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3b4700-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "46a969d0-3013-489d-b097-3e92f6462185", "comment": "Malware payload (Mirai)", "value": "ee0161d1ac78da6d4cf0e0b67449fbeb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "4b311c41-10e9-42fe-b2e6-c5974ac7dd2c", "comment": "Malware payload (Mirai)", "value": "d0671e1ab9270c34cefbf96a2d8a7b61e37db4e020d4643c375daef7a06eb07e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "bc8318a9-dcd8-48c9-8041-91d11bf678c9", "value": "T17433F886B8814A12C5D4137EFA2D118E3323276CE3DFB2129D116F64778A97F0D7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "cf3b22b6-0338-4ead-94fd-f7b2a92b1e7c", "value": "768:dtnysh8O0eElyJ5a3DciMcF+FQ9S5FyQ8ZboxGqnTUyUBfimkZbBIIuAgqiUpvei:dtnys30w5a6Q3ZboxGqwyMzXI7iUp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355910, "uuid": "5b888583-b9d9-47c1-b08c-6eebfefbc8d9", "value": 50480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "13d7cf4d-0b8e-448a-bc9b-88d64120bbf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3df955-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775355910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "d5b77526-8566-41f2-9e45-4804fdc32b85", "comment": "Malware payload (Mirai)", "value": "39e5e5744bf8013049a929a71e19cca8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ac714778-b3f6-452d-bd59-6d017b11a8bb", "comment": "Malware payload (Mirai)", "value": "8204ddd4d0773702a409868ee066f9d3e054672652e9000f00b57a0d87edfcbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "217970dd-f9fb-4d6a-8f66-1251bb4e6316", "value": "T16C33A51E3E218FECF369C73446B78D21A798338626E1D646E16CD6101F6068E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "c7c2708f-ba8d-4c31-9435-d63dc8169d23", "value": "768:MjU15QxYHALtV3uNa6OOZDCQaWfZs2E6bXMhgnUyi4mNi:V1bHAhka6bZDPs2b4kq4+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355910, "uuid": "a5aa2c51-130f-4d19-80c6-04535f13dc81", "value": 52380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355910, "uuid": "9d7766d3-2d79-4d35-926c-ec1a24ca2a03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775357669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775357669, "uuid": "394777e4-2637-4fab-9ec2-0e2b9cf86ac4", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775357669, "uuid": "1856add8-aa8b-46af-abac-94971b519900", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775357669, "uuid": "fe6df316-4611-4528-b5ae-3d8db494d74d", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775357669, "uuid": "c8b2d0e2-8cee-4583-b8ef-e96952c29174", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775357669, "uuid": "4b29df87-81b1-4e9e-b732-260e16f25c89", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11d31748-30a0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775359947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775359947, "uuid": "05dc8b82-ae19-4374-a6ef-c3b457dea15f", "comment": "Malware payload (Mirai)", "value": "78774672884f8cd7593fced3c7d1faa4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775359947, "uuid": "b990155d-aa63-48ef-823b-1175ce6ec108", "comment": "Malware payload (Mirai)", "value": "a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775359947, "uuid": "994b4ea3-2861-4da4-bf3c-6805a94a96fa", "value": "T12E6302881121B1E4C3E58AB6FBF6D2D36E0A32BC9561E033B50B6661D4758B333F51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775359947, "uuid": "938407ef-9c7d-4489-b225-7f0c13bbb466", "value": "1536:1s2BH1aqzhASgdmckDZrMoq/CatIGptr7vNvVcxUqwVy:PBV1zOBkckVMNaSdr7dS9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775359947, "uuid": "5adc9e5b-35c9-4a0d-adf1-ec223f7d7710", "value": 68276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775359947, "uuid": "02c07c84-edec-464a-b1a0-fda12f634077", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775360005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360005, "uuid": "392c5fdf-f636-4919-a419-84e5f1f52830", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360005, "uuid": "1286c8a5-0127-466b-90a9-53120178e75f", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360005, "uuid": "a8cd1c0c-84b3-48a1-af54-f5b4fe6eb8ed", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360005, "uuid": "9d6ae86b-f3c2-41c0-9b34-c7afb1933d07", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360005, "uuid": "633957ef-52d1-47b8-9a2d-1f04f2d48228", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fcdf71c-30a1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775360588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360588, "uuid": "c00a9109-6caf-44e3-abaa-230dfda4c70d", "comment": "Malware payload (Mirai)", "value": "d3da77d796bd7b6a6f68cadcb114b06a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360588, "uuid": "be077fb5-5c30-43e9-8d1c-f429921fa944", "comment": "Malware payload (Mirai)", "value": "c4efe60ab986e286106dda221e61968b35710f64de6f42c792c21009168ef474", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360588, "uuid": "e02c32ea-37d5-4235-b6e2-665b433c09e6", "value": "T16C82CF2061AB74E5CBE14431FAAECEC6A7160BF8D1FC36A326586B78894150251F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360588, "uuid": "5753c56c-16f2-4159-80ec-0ab5377c623c", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaayNhymdGUop5h5lx:6GV0P6+kom0tVAoNvm+to1ayNs3Uozn/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360588, "uuid": "ad5b7218-2494-4853-aa60-3479c7484baa", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360588, "uuid": "ddc3c70b-d42c-4e41-8038-e26d7e901cac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b28a9ae0-30a1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775360646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360646, "uuid": "9e6fd395-a928-4384-b085-8ca08e27bb68", "comment": "Malware payload (Mirai)", "value": "9b4c3f7ef5884cdd4cffd6efef993403", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360646, "uuid": "82b6a6a2-03b5-42ec-99f3-85da11836956", "comment": "Malware payload (Mirai)", "value": "10ce123919ff47a2d88a04a30adc73ec8b559efe5d9c363a0a1194e0986c8053", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360646, "uuid": "d0ff61f2-486b-4319-8820-b489c7369fcb", "value": "T11DA2D1BFE8D64957DDAAE53B011D00CA50BB5C5413A783C23FA535B389678E8FC366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360646, "uuid": "8afa3fc4-728f-450a-a896-9074e4710fc8", "value": "384:MccDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/uW7MM+v1RpW:NMkKJFH39CBVQey7qsZoMTv7EpW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360646, "uuid": "0000f6e3-3199-440a-9623-93d51309a7fa", "value": 22448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360646, "uuid": "40d2aaec-1129-4cb1-8d58-721db2acd2d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd6919d7-30a1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775360718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360718, "uuid": "4b316ed2-68db-4478-ac6b-699a60cf8429", "comment": "Malware payload (Mirai)", "value": "ead946b8d243de7296c3214db29ce689", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360718, "uuid": "5fd6c01d-6f80-4547-8652-b08452ae9c6b", "comment": "Malware payload (Mirai)", "value": "c6f3572fb3b09ac52f2412b661cce6e0b3be48ff3831eb9ffac788ea8a149129", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360718, "uuid": "04ec195c-a95a-48b3-9812-75cd35e672e8", "value": "T136230271890E9EB124303C32DBD9A393B6E129B1C6673013D6180B386FB57231E57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360718, "uuid": "e2f21dbd-72a4-4555-bf08-2f37ede54cd2", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3y9q3UELbUXfi6nVMQHI4vcGpvS:DECFd+A6YHAxnLRQZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360718, "uuid": "12313fbc-0d42-45b1-9c34-a664916f3e71", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360718, "uuid": "d2c06162-132f-405c-8cb4-4d85db5aa49f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f4e23e4-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775360829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360829, "uuid": "397b03cf-66d9-428f-b314-b1e5ee04fb4e", "comment": "Malware payload (Mirai)", "value": "a04c8a5be73ad58a4d33524fbc75cefd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360829, "uuid": "760d0c76-51de-4ca9-aa3b-e808df625cfb", "comment": "Malware payload (Mirai)", "value": "336c13f5f83a2dc65a58a4566850fbe6ad874267e9307b62260d318e05aaad21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360829, "uuid": "5db34492-40c0-46fe-8a66-f5ac483e5489", "value": "T15A822887E982D9B6EC5212B4B1BA67E2AB33F43E1489EB07C7146C35CC52A05DB077", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360829, "uuid": "7608ec24-76f2-425b-a256-6cf200877bb2", "value": "384:fctKNTih5XonRYGeKboF1G+IP9ayv4S2k46RFV:3NTSMeVFyv4S2k46jV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360829, "uuid": "abc8691a-d450-4bc1-91b3-7638c094f711", "value": 19056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360829, "uuid": "077db36b-1814-4da1-a687-8a5fdb122ef5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56da4f49-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775360922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360922, "uuid": "096f2f0a-fdf7-409c-8801-9743e550685d", "comment": "Malware payload (Mirai)", "value": "34a8e2209e4a468f1e3ae79d47d7abae", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360922, "uuid": "154a3239-0a45-4b87-81ac-c6a2e2aa0dba", "comment": "Malware payload (Mirai)", "value": "a1390964c26ac99dd99796b07064db70382ef3434a38af653c5e833c97ed5efd", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360922, "uuid": "4b6469b8-44ea-44b7-9e10-4bc5a8ea34d8", "value": "T1E8E2E746FA819F01D5D41279FE0E124E7313176CE3EE7316AE246F24A78797B0E3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360922, "uuid": "43392b5c-5f80-4a76-9e60-5d71bd30b5a8", "value": "768:kAynEEC1oZxa7yeeWxrgfVmoyY/MlE4ixVy8nhKagrVY:kxn99YK8gQIMFixV7nhKr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360922, "uuid": "959db696-7e0e-47a7-82ea-272aa9b8fe72", "value": 34092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360922, "uuid": "26bb425b-6d84-41eb-be3c-80205e915d50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7748ea3d-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775360976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360976, "uuid": "77768277-313f-4d49-a4a2-7ab41d9dcdf6", "comment": "Malware payload", "value": "e19c52960ea56d0ed013858439406f27", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360976, "uuid": "54f6c8dc-80ad-4d48-9836-7a9d3df1a507", "comment": "Malware payload", "value": "94ff228f8e9b7c9f58bced1166a97787405f5279869696fde02c3ddefaff7d3a", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360976, "uuid": "e981427e-5bed-4754-994d-6cd78883ec2d", "value": "T1B5860137FD86CC39D957C8FB53C2C157642A22D9A82B902F06A08DC95A73D5A0352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360976, "uuid": "52227639-90d1-4f0e-8c13-851ad25dc6c0", "value": "196608:5lPPp2RgZ3H6culPGbt7YO0AJx8rDxCy2FUJo:5pB2RO3acughMY2vx0US", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360976, "uuid": "0e9a99d5-4d34-4f78-93d6-1f0052e2df88", "value": 8091965, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360976, "uuid": "7f91959e-16fe-41b4-a290-120d699746aa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7c2881f-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775361138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361138, "uuid": "05e90b21-f735-4000-80bb-939edc0fd5f0", "comment": "Malware payload (Mirai)", "value": "64aa377623d4c419269892ded4c904db", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361138, "uuid": "0db01f04-e12e-4272-9b79-880c03969d10", "comment": "Malware payload (Mirai)", "value": "68e64325ed4619376d48309b3976914147a8aaeda4327db1e3b3b77bc8f1a065", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361138, "uuid": "19e51522-af04-4ca6-9328-d6be78c4028a", "value": "T185B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361138, "uuid": "56454b30-7af3-4ad2-8aad-79e9d0c114d0", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1i/LWy:c9sSyzz36YaWWgg1iq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361138, "uuid": "7d91141d-9837-4407-94fa-56621e6133dc", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361138, "uuid": "414b43ba-837f-455d-b365-f9bda943f8ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe85a474-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775361203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361203, "uuid": "3a6bb8bb-5f40-4514-a9de-448807cb1000", "comment": "Malware payload (Mirai)", "value": "ca0826b5e3cfdec7c723397584278251", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361203, "uuid": "f9ba3b16-7b82-4735-90a1-835408d5bbf6", "comment": "Malware payload (Mirai)", "value": "7938be55716b8e131cc9d113a5488b065ea6ce96c79fb810cb223b35fa5812db", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361203, "uuid": "c771a639-3e02-469b-a83b-6eb59b4b3246", "value": "T1C8B32A46E7408A03C0D62779B6EF42453322EB5497DB73069528BFF43F86B9E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361203, "uuid": "fd01aa98-863f-4464-bc38-66a0e45e2c85", "value": "1536:7inxzdGsaMokqsXRXwqK6YjchNl3hiI6Ke4vJLx52dUkpUzA1zw/991dmroF:SAsmkqshXwqK6YW76KeCJLCd9M/9NO8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361203, "uuid": "67f97c32-dc84-45eb-815a-1d15aad04281", "value": 116586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361203, "uuid": "b60a4ecc-6280-4a3b-8c46-b85ee02d2a8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae231dc0-30a4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775361927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361927, "uuid": "658806c4-18b7-4974-b8f3-7bc564094821", "comment": "Malware payload", "value": "e49dbcebf4ba87e706c83aa6374de649", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361927, "uuid": "c6e227b1-e2bb-49ee-9c48-7bf93b49447c", "comment": "Malware payload", "value": "8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361927, "uuid": "85866aa5-a37a-44fb-b06a-30fbb1e8d67e", "value": "T19A51C7C17DA49AB06F4BC835157B371AF017128A2B432968B09B2049DBFC8D253BED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361927, "uuid": "c7be907b-38a6-4872-8818-99312418e960", "value": "48:eNJn57KOnWhNRv/BCslwTvIRbz3QPvlId/IkKj4651dF8q3o6yvM18rC6oXFd:Cp0mWRv9lwBPNCwzjRXj8q3o6ee8rRkd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361927, "uuid": "19635968-fe8f-462b-9a85-7f7ccd625e52", "value": 2532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361927, "uuid": "8dce4d00-5b72-4676-af61-a78841d8c604", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1767bdf0-30a5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775362104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362104, "uuid": "7a4e33e3-4062-4b2d-bdcd-111fc502d0ac", "comment": "Malware payload", "value": "482a5eff01559d8800b811f4b7c5aadb", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362104, "uuid": "81decded-c392-4f0c-874c-8fd6c588e22a", "comment": "Malware payload", "value": "77dd1dd9b12699c64ab31c0140b28c70339014a0969f3bb7a79068f5b8f3f34a", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362104, "uuid": "dde9aff4-4e36-493c-aa8c-62ce1b3e8195", "value": "T1B386125E7D80D929D64F60B117D1C467AC2913CBEA1DD01B8AA08DCB2C72EA5E343E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362104, "uuid": "3547a11b-ae53-4132-8b46-cfb10b10600c", "value": "196608:hFavFTNDz7tlVUg476K5TzjHMdKr1vozCTOZrQ7Q/GF2p6eWJZ:h2Bhz7tP+myHoKr1LKO7lfeeZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775362104, "uuid": "593181c4-33f2-4350-90ec-fb30b929ce7a", "value": 8029054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362104, "uuid": "70e39d24-c20e-4e8e-9bb4-e3131012b442", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36e0b11b-30a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775362586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362586, "uuid": "0ff4c546-3ecf-4b77-97b3-00e47ae548fa", "comment": "Malware payload (Mirai)", "value": "b3438ee96763a4b3233b7feb02cd9c87", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362586, "uuid": "10dd2843-0ccd-4a29-b3af-4c8169d11710", "comment": "Malware payload (Mirai)", "value": "9e1265682d8a9166b319f1884aa591ac2f3cab345f5a608dfea5cb9543f9ad33", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362586, "uuid": "3f5fb466-c71a-4830-8b2a-23c81d8e41e2", "value": "T13AC2D1E07726F931C420AC3DE52B4C893A51167C91FF393764169D359EC269A23F48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362586, "uuid": "ba682370-c754-47de-ab38-08ec34f289ed", "value": "768:4MKyhegCCMqfizjoNpd2vJdX6vwrfGp9q3UELuw:PKy4qfqoeJdXWgffL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775362586, "uuid": "c54790e3-3c33-45b3-9882-7685f79aa523", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362586, "uuid": "467e64c3-0545-42db-8dda-b65fe3c10386", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f98ee18-30a6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775362708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362708, "uuid": "f40fd839-dc0f-489b-8183-3e36eae963d5", "comment": "Malware payload", "value": "ef1c744fee536915b804629dbc4bd50e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362708, "uuid": "8d60b6cc-8dc4-480c-8fc3-801994437fd0", "comment": "Malware payload", "value": "525fe96f26b5e233b20ce7532bcebc3c965a7ce11bb3ca12830f1487d8ef1bf0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362708, "uuid": "ac5cadbc-f227-45dc-8076-8da739812f11", "value": "T197931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362708, "uuid": "9b4447d5-471c-443c-a26c-4153fbe3386b", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKF1sPyK5t8:08jI00GitkbFv2v05xsprb1sPy+t3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775362708, "uuid": "6bbb76b2-df5f-4d22-ad64-8d4583d52c62", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362708, "uuid": "d12078ca-618e-48b8-933a-32ba8fbb0288", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47354afc-30a7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775363043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363043, "uuid": "51190d02-c301-4590-8ff4-b51b09478951", "comment": "Malware payload", "value": "92d2c727d4c4c1cf90e965e5eb58dde3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363043, "uuid": "5c3c6a20-547b-4dd7-8d27-8b5035da7f3e", "comment": "Malware payload", "value": "5238ab859c3fe2e84e2f9bc9d3ef3fe80e1e193d5e308ecd91345c0f188456b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363043, "uuid": "70c470b3-dc8d-47cb-b3b9-181cd5241d54", "value": "T1BA93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363043, "uuid": "7a383ddb-20ce-4977-9aab-222393d5542c", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXyIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775363043, "uuid": "dcb0699c-bb71-41df-89a2-bc6f1c1f0e18", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363043, "uuid": "b044ba81-dcac-4af6-9e94-e284f20a3789", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e900d0bf-30a7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775363315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363315, "uuid": "39ba20f0-fe3e-4824-a1ab-e176a34049b9", "comment": "Malware payload (Mirai)", "value": "9ed8e66261579de0809f5ac32bcbba73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363315, "uuid": "edc711c2-33d0-4034-a574-463968c73649", "comment": "Malware payload (Mirai)", "value": "7b7feb85d68a2bada82eef17309890f90de907332ac8cfd474708387f7ccf34c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363315, "uuid": "40af88a1-9460-451c-91d2-f48aeac2f068", "value": "T175432921B53A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363315, "uuid": "c80befe0-84cd-4bbe-bbb0-8c8fd2ee5a8d", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwH:RqtmZPuutfbltZFBSJsBcfDSTFI+BEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775363315, "uuid": "14188ae7-7393-44b7-b600-620e9a6c49f4", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363315, "uuid": "bb4dcdf4-ab7d-4c12-aa24-4f059b6787a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a0ba128-30a8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775363424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363424, "uuid": "3e50a6a3-bddf-4735-aad5-aeed019a3d30", "comment": "Malware payload", "value": "333eb86a98ad58a74348c0e7588484df", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363424, "uuid": "a5001fb1-fefe-41d8-ac1f-7e3400c425d7", "comment": "Malware payload", "value": "e43afdb028b2d14716fb12c7fdb7442bf233e13fab54b24b5501ed6fbefd6ed2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363424, "uuid": "c276627b-f2b3-455a-809d-80b8880c90ca", "value": "T1A6F300A3370043776D7AC89FBF194DE9807EBF0003A521E69A6EA895D0B87C3C5E56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363424, "uuid": "810cd6ae-04b2-4bfa-a366-115683114456", "value": "3072:DMlrjFq6rhCvULI/nxPkyLnx/IzED1ZUszzZlM2J0:4pM/t1ZT6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775363424, "uuid": "29776b17-0dfc-4319-acad-6d941895a8d8", "value": 172519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363424, "uuid": "ff14de0b-f3e0-42d3-94a4-fe44c675d70b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3d2d3ac-30a9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775364084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364084, "uuid": "abf5163d-4e4b-4c43-b5be-acc5f0b3807e", "comment": "Malware payload (Mirai)", "value": "586113f3eecd449a4b8afa90f6bd85c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364084, "uuid": "251773e5-f38c-4a90-a783-9dbc1393673f", "comment": "Malware payload (Mirai)", "value": "e00c30b41dee8072a882975c6a2fc6055d11ca5b6208519d4aab470214967eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364084, "uuid": "d54b216f-e78c-47f6-a61c-d23fb31974c7", "value": "T123B2C0CD61943084C98D7C7D278D4A664F6CA190BAED9F26E350CDD8B3BAA8F34590", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364084, "uuid": "72435eac-26ac-4fdd-9652-c1cc5fe38bb1", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBp+ZqEWvr:/QlS07FUXqIYSXQKquSq5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775364084, "uuid": "ecfc2b90-cb71-4740-a482-c38c05945ad2", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364084, "uuid": "5b2022c2-70bc-4bec-a57a-fe08946adb8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc5ec522-30aa-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775364582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364582, "uuid": "3f38a8d2-efd8-4e92-bc65-cc7377ead2d5", "comment": "Malware payload", "value": "ae82cdf38c7bef15f6171b5a46850020", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364582, "uuid": "66045349-62ba-4623-ac28-038f5c379a87", "comment": "Malware payload", "value": "55db1c0f101ffe38d57c1f79549955198f16006d33208ef477871b52527629b7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364582, "uuid": "8fec86db-6ae4-4d7b-9dea-c62ff6b6c566", "value": "T1BA75338D9D5D3C04E9172A368B5AC44DEECF4266039305647F3479930E52EA68E3FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364582, "uuid": "55e16567-ad5d-47b2-985d-02e85f33e5e6", "value": "49152:bFIKL0E9uToq+CBsqLJ7omSBcUt6NrWDRPTH:bWlAuToms7m340gtz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775364582, "uuid": "fcb6349d-e029-40db-912c-acaa907cc287", "value": 1686974, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364582, "uuid": "b1ff738f-48dc-4042-85ba-97a5c5887288", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3da0aae-30aa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775364621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364621, "uuid": "6c136752-2c6f-47ff-8158-2c4f4e9e1132", "comment": "Malware payload (Mirai)", "value": "0a9adb66083d623333499b96d529d413", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364621, "uuid": "ebf6461a-d133-4071-a58d-7b8b3a7f946f", "comment": "Malware payload (Mirai)", "value": "8b74aa24a15e7e52e7a97b84486ee3a0ce24e22e0183f978e70b7fdf2fa68cf6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364621, "uuid": "84228000-0000-46e0-9f1b-046a22754dc5", "value": "T1D3A2E029BF68828BC832797455E9F5D21397FCA1F29DCC4E2940C15FF0A33A96474E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364621, "uuid": "ee3a65fb-556a-418c-a4cf-8b64718fa8ea", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTp:798o08kxofBE+ZkXaITbp2F2TWul0c5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775364621, "uuid": "e7d26b95-8d49-4e07-b058-37751a63787a", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364621, "uuid": "99a82ad2-facc-4c12-a2e5-3343a4094fd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b25fe07-30ad-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775365546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365546, "uuid": "b9c3a3a4-4b51-472d-8623-4acd6a127559", "comment": "Malware payload (Mirai)", "value": "251113d2e2ef7976fb23447fcb6ad25b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365546, "uuid": "423fcbb7-80c0-4f70-b047-253be53ead4b", "comment": "Malware payload (Mirai)", "value": "e95fd0b1db8c49d7dfada426b6cac012227f505a8c793cffe0d4173638bd4fe9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365546, "uuid": "bce5f163-0c84-46ff-aded-e1045771231a", "value": "T11BB2E16C50940E05D85B40FF9AFE05E6E66184830AFFCBD99F270CC3E2B74A2791D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365546, "uuid": "32ff89e2-036f-41a8-aabb-bc1a6ddc6fab", "value": "384:MniiBi3f2PSrf64K5WFSlvNjJ6mAN8bhmglJbN2EIKHT0P6+PbhDYOK6sNrVeCVM:xiBiv2PSbePxNNw8dtlJwEIGT0P1PbhT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365546, "uuid": "181fc0fe-9a83-45a4-8cad-80d22c719029", "value": 23440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365546, "uuid": "75da0211-8e47-4b01-bc7f-3542fd3938f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fb27c50-30ad-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775365661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365661, "uuid": "c8ac3a77-c28e-4f64-a32e-21c9ccfa436d", "comment": "Malware payload", "value": "309530a08aa72c9b9989687a02e4f56d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365661, "uuid": "58a77c4b-8d2f-46b9-b152-7b7a7f7eef5a", "comment": "Malware payload", "value": "d94c625fa338a523f1c75a577c0587c343565f04a332d65a47ca5263dc051cda", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365661, "uuid": "93fd0082-086c-49fe-b82f-b7a7b6243ea3", "value": "T1DB8308327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365661, "uuid": "688186ea-2a6b-4c7c-859b-0aa943755fa8", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn8WaDVN/:XEKltp9txAX/yr2pb8WmVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365661, "uuid": "b06649d9-375e-4336-8292-c2f747013b0d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365661, "uuid": "ef7315f9-0150-4d55-9e7e-4a2c7802b3a8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "662d392c-30ad-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775365672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365672, "uuid": "3040ac4c-7ba3-4dc6-ae61-8f837f8d86bf", "comment": "Malware payload (Mirai)", "value": "a51ceba65d71f6ec1349c71ba5618b12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365672, "uuid": "3587351f-1dcf-4812-a74f-721c5b1c3176", "comment": "Malware payload (Mirai)", "value": "4ed74b9a2965fcb33d0132acff5f6256bc1d8919eee08fdb254d7c1ac6e4aead", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365672, "uuid": "7def9001-952a-40e5-bd6f-73ff4227b0ba", "value": "T16AA2D029D3466EF4DBAF9C9493C2C2C276E547C7378AC8E240EEAF016506046B789D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365672, "uuid": "d5443813-48c4-4d94-9285-e01e7ff35690", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5RM4uVcqgw05VxJf:9RxsSVsMD6xiJJE5zRWN84uVcqgw09N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365672, "uuid": "6ca89014-46a0-4b57-b5a7-85c01f817e78", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365672, "uuid": "f4c1c54b-146d-4475-8e7a-7612271417fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96b97b04-30ad-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775365754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365754, "uuid": "bc3f93da-14ed-4e37-8ffc-2ea725e0852e", "comment": "Malware payload (Mirai)", "value": "8bf972879064893308ad4726b8d02beb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365754, "uuid": "1fb27851-6b0c-49e0-9cb7-5c52af330e22", "comment": "Malware payload (Mirai)", "value": "1cfacd17e613b1738f31fac5b9d39398454427158b6a6430a3339ce6b9cab490", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365754, "uuid": "7f1fd1ef-7d57-4a58-b53d-2646c8297d94", "value": "T1B7B2D03C1B161BA8DA1EC0BE839D0B613CB81B3591829D4B6207FDD7AF964747453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365754, "uuid": "fdd5ac04-6d24-4f02-89d7-a1b1c8221b33", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiqFmdzJgGlzDpH7uNj1JAF:neD8ZSWvZHZbs1row697qohQvg9wizJz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365754, "uuid": "b8a974e8-67e8-4ea9-9455-3a4d6c31860a", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365754, "uuid": "a4a82153-59f0-4b99-9734-8de5f4610c5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b20222bb-30ad-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775365799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365799, "uuid": "30aed3cb-337b-495e-9eec-847346b9a8bf", "comment": "Malware payload (Mirai)", "value": "01ca6f88d37733046800de1f7373fe5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365799, "uuid": "ba59da3d-0240-43ba-9acd-b16157150c24", "comment": "Malware payload (Mirai)", "value": "0eec972341affce434bb697a0918a7c40bb76c693bdbb01bc46c17393e26b6cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365799, "uuid": "1c8ac168-67f5-470a-ad7d-67b88a1590b9", "value": "T1D2A2E17DFB20C18CF086847E2957127B456FF8A64B98420E6E15D0C701C3ADEE49AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365799, "uuid": "a0730142-52c8-4807-94d5-d7ae566b843f", "value": "384:TDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxx+cj:TDZ5Dw7RjFjcU+O24sDS4HhrhpEguX39", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365799, "uuid": "38983260-3177-4d75-b136-ab890deb7ea2", "value": 23260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365799, "uuid": "a485f9a3-d87e-4550-9801-8beb6bc976c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775367378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775367378, "uuid": "7fcab40b-74ad-4f1f-9405-da6caab35bb0", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775367378, "uuid": "14f61b78-f8cb-41b0-b97c-0dab90fe2b6e", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775367378, "uuid": "f9a5a9bf-96f0-4fc3-a161-2130da73c7ec", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775367378, "uuid": "36b9e149-e01e-4fc7-8d83-5e260bdd0454", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775367378, "uuid": "ad763a1e-2e22-4f90-836e-68daa64f9009", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbbc366a-3069-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1775368686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775368686, "uuid": "78c1dd24-7241-46aa-9c68-e3baeaeccfc0", "comment": "Malware payload (ACRStealer)", "value": "5cf76c1361137b0174f4a0e4559c1797", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775368686, "uuid": "e64deced-8baf-447b-8c39-dc3589bb7629", "comment": "Malware payload (ACRStealer)", "value": "5c8a5aa207c361e374f608601712210944b1b6f56f4c8734e89177a4f22f35cf", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368686, "uuid": "339da55b-db6f-4c2d-8078-86a433a05d6e", "value": "T137F54B0BECBD8CE9C0A5E13484336152BE65B8401B7173E72AD5B2A82F737F09A75B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368686, "uuid": "e3b94b0f-86d9-4199-a5a4-47f04872c343", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368686, "uuid": "643d7abd-6289-466c-9177-5b07e03e6374", "value": "49152:2mzfZyNO2z+3JBtsmvm+XVNfAE8qjxnc8F/U:2mQ76Z/xAE8k8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775368686, "uuid": "90ad46d9-c06c-4ad7-9abb-fd8959c1c9d9", "value": 3565568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368686, "uuid": "ced4e453-dae6-4d23-822f-da3333d4cc26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5301a71-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371872, "uuid": "59408b96-8812-4250-b8d5-33f04244be44", "comment": "Malware payload (Mirai)", "value": "931aab889cdb941e01dfa8259df1baa9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371872, "uuid": "f5b4a0db-8fc2-49dd-a0b8-02dc5cd742b1", "comment": "Malware payload (Mirai)", "value": "ab6132b08cb8dd8ffcfbe47b39f44029d8cb3fa99d84c05e75b17338fee51357", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371872, "uuid": "b1c16924-7f6b-41a6-8dd1-b10a0f431845", "value": "T1AF133AC19643D1F2EC5212F5247B67624F76E4368A7DFA92DBA92631FC02B10820B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371872, "uuid": "dfdfc7ec-d3d8-414e-85bc-4a403507c217", "value": "768:QQaiSup66OkEgy5oD5YQuLKbvOTtndwQo9dsZkI/4b+Gd7nX:QQaiSuptOkEX6D5YQ1bvytne9dsZmb+Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371872, "uuid": "a42c0832-e68a-42e3-bcfd-8e21cfa3eba8", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371872, "uuid": "172b46d4-4c8e-406f-9f03-c10e75a7eca9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52a3ad2-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "40adef49-7fe9-4514-a260-b40918bcb34e", "comment": "Malware payload (Mirai)", "value": "d2e25717d806f1a9b96c403ad7ab57bc", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "c80b1134-d126-4cb9-b923-92f1531b9589", "comment": "Malware payload (Mirai)", "value": "96f0ddb6fbf3fc415f57ddb5bcd0b815e0d7b40b9106003bcbb899d129035bc9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "22bcf32e-5566-4912-a605-c8a2f81f52b4", "value": "T137330B997C828D2AC5D0127BBB7F02E9331563A8D2CB7313D8249B587E8B51E4F677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "4a733304-fb2c-4029-945c-a58073210535", "value": "768:8PyY3WsXLb1uGyxC3pXJyTt39Sb9QuB5tdM4OzJWzRTW3t3lViKcPQshCLMNm+k:8KY31LQxCIB29FBZqzJqW4bhCLMk1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "cdc56084-cb2c-44e3-bdc1-ae23294f68b4", "value": 50287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "4f2b1dd7-c9d6-4401-a2b1-3a2f7449ebbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfa743a6-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "cbde966c-2d7c-4f52-99ce-ec38e2c396b3", "comment": "Malware payload (Mirai)", "value": "314906c525d8185f40a495bb380cba64", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "aacebfbd-eea9-4fe1-a06d-d182f6e401ef", "comment": "Malware payload (Mirai)", "value": "c74e8151940f4afed1ac9503af18f0d93d7ea95f41de82e14f948570c5c79947", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "3997cde2-cb23-47e8-a258-4fa7a3dbbde7", "value": "T1C1131742B3180547D1A36EB0353F07D1E7ABAE8122E4F288760F9B4DC171E779546E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "f2817bbe-1421-4da5-a9f1-07d1d3c6b816", "value": "768:TKZQBal6xzFogyxBv7M2ccDP1UqIVzFPX4hp/PanpyvsM7fV+GFWcv:TAUFogW57M23DyqaPIhUnYx7fV+WWG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "239d54ab-6278-43ef-a00e-db9c0d688fa5", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "bc680021-5cef-4477-b9b4-2961e6175139", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6204b7b-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "6dc35dc2-fa2a-4a26-8c92-4f5f7b9f24ba", "comment": "Malware payload (Mirai)", "value": "04349d25135b9c855194de808afaa739", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "5eb0499c-e301-49a3-8071-decde9b1d05f", "comment": "Malware payload (Mirai)", "value": "c34ceab04830dd58b4f4185c3d0f26f9e39203b65fb8b32ea57617c7c79076bd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "d060ba18-4252-4eab-9ea2-937efb15f713", "value": "T1A444E806BF910FF7D8AFDF3702EB0A11248DE81727662B367638D974B60A54E19D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "2ae21633-c070-4dcb-b822-a3ba51bca296", "value": "6144:Eb2snELwogykYwVYURVaf1wWp5GqohWPkzv7MlA0:ysLwoPkCqVE1wWp5GqohWPkzv7MlA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "78631d38-25c9-430e-98b4-397629136bf5", "value": 257039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "7cb5fddb-0fe8-4fbc-a73f-76b592992863", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d62069da-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "a3078125-a403-404b-9474-a5665866c71c", "comment": "Malware payload (Mirai)", "value": "5d4cf4790fc43105a055b6ad807d1066", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "bffdb23c-3167-45d5-a488-7a707f67ff29", "comment": "Malware payload (Mirai)", "value": "ea8ad35d129cf1263bf38ea3c75c53f2a70b4d54a40f6234ac019de5330edcf2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "f15092e8-e275-4d8a-87dd-e5e26a6622d8", "value": "T119244B93B905CEBBF40EB77604D30721B272FB6649431632B317B9B5AA3A3D06426F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "caa06caa-4ddb-4f03-a649-50aa2dd5b1ec", "value": "6144:6kEaOzQ3c1yVLlITc9gsS70LM87k5N2fY3KHdEhhiZ1A2lON5l1:6p4Pgb8o5uY3KHdEhhiZ1A2lON5l1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "a68ddc61-ad5e-446d-842c-ee1e8518cb1e", "value": 225732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "9bc6f16e-a7de-4445-8f41-69d2125fa062", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6270f42-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "1ab80d3d-1262-4c70-97b7-38f5d256f47c", "comment": "Malware payload (Mirai)", "value": "ffecc4f2e7784a757652be99b922803d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "298e529a-7537-446f-af02-c40d40d83e08", "comment": "Malware payload (Mirai)", "value": "8516debe297544c76acf4fa3f1fb6fa23c01cacd8d35b4e7f7ae373c17b6fc68", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "17cb9b01-b945-4334-90bd-6586fb070411", "value": "T162934A13B9C4C0FCC859C031479FA637D973B13E1239B69B6394FA167E89E512B6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "4d16a98b-3e6f-4641-bdbb-1c2226ebdee3", "value": "1536:Iaq2FRruLjGmf6hT1G8nXyOb6TJTV1+1pszgNv5JllKb8rvJz2:I0wjGmgT1dnl6Tf1+1psz85JjKuB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "854a292e-69c3-4cdf-a7e8-84e024067a3d", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "1e18bde5-f794-46b0-8af4-7e226feb045a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d62925c5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "451de5f0-df10-44c7-a35d-69ca99f30e1a", "comment": "Malware payload (Mirai)", "value": "2e8fe660d953e01775c83964010340dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "98d494ec-55eb-4cba-ba93-93288a67df4a", "comment": "Malware payload (Mirai)", "value": "33fb57042352799676a5ef7b99b0dd23ef62ee6b6285c154e6bdad9d40a249bc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "effbcfbc-3e66-4f36-997c-42d0464a8ab6", "value": "T1DE243A0775D08DFBC4C69AB40BE791328933F8291B32624BB7A4FD951F4EED86A1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "114518be-22c9-41ab-8aad-dbc6a53bdf77", "value": "6144:qarStOXX9afdfyk4KHf+hetEKAM3pNcle:qarvkyk4KHf+hetEKAM3pNcle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "703cbcfe-c457-4fde-ab5a-d7a7bd3a6d3f", "value": 220337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "441da2c8-4849-41a4-9fd8-7c3b60ca0d04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c96d05-9b63-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "85432bf5-f158-47e9-b6c6-f142c0b48275", "comment": "Malware payload (Mirai)", "value": "3383cd94f738631f89016bd912ae9c29", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "a8d894e0-7bcc-4fa9-836a-2e1571ae86ed", "comment": "Malware payload (Mirai)", "value": "2b37a01cdce385724855a6fae5bc9845467bc543566684bb19c565c3fc933f75", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "7320e6af-09b9-4e36-a8c4-2dab2a289456", "value": "T19F042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "fff57028-267a-4997-93e5-d4a9ad4f4880", "value": "3072:OzeSvtfk84oALv2eEQakGzORuGMzw99LEd38YhTfYo+M/RM+FDhdLn:2eSvJGoA7TEQakGzORuBGLEd38+x+M/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "569c002a-39f2-402f-9e2e-7cc1baa7b4cb", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "c38d1cd7-9f79-4d76-a96e-0e8368755e0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d64ecef5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "507ca8b1-1f8a-42a0-83fd-e238d5d6e139", "comment": "Malware payload", "value": "5fc3674338d23e3157823791b9cf2fdf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "3091e72e-d718-4c6e-b880-a53513941c19", "comment": "Malware payload", "value": "468c3ef3a5fb93ded47e1e75534d3157dc7ddebdb592eefd5dc74d331f1ae964", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "db00f5c0-c9b7-4112-9a35-69b156dcd41c", "value": "T18FD44A06EF951FDFD4AFCE30862E831B19ED899702C1A67561FC894CBA8D2994BD34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "559db4e4-a4d8-4ae4-af47-5e9a2a0222c5", "value": "12288:Bm3ZR/Oao6JEXCWtHywSfHDvUn+GOPXKfx1WXLmOdFk38Oeu6iu1TxnkNUohGH/4:2vUn+jPafvW7mOd6Wvy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "8c999969-9ff7-4a86-ba03-10c73fefcbc9", "value": 646568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "27f69776-c57f-42dc-aaef-becfb2f86b5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d65bd20f-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d15a6148-1654-409f-baa0-5282c1b08c3c", "comment": "Malware payload", "value": "43f66e34fc120e47ff1bd7a32dcd74dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "dfb22c5f-c8d5-4a56-90f7-b9134345dbbf", "comment": "Malware payload", "value": "17dca9e7c21ca5fd55c5ad77a6e339258d7c664b7f3333e58aa4d35b9e71eb41", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "36163b38-24f3-424d-a34c-977ac41e8f86", "value": "T1ACE43A41BF1C0563C9531DF0293F8395F7257A5240F9C239331EAB573A22E36AA877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "1def3e98-b2c8-454d-b1c7-05d7f15389da", "value": "12288:PhEFCdB+A1VVv1Jzm7Oc+W6uLX1qKon70HVKWLNsopSq83q4t:fXv1O61KoFWLNC3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371873, "uuid": "c0b7dbc2-2810-4953-9756-4d5dbbd4cb5a", "value": 660336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371873, "uuid": "348a2dd2-6f8c-4e76-a2d8-50cc8dd4f6f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e53f6356-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "80ac90a6-28ad-4d27-8fd8-3a8cfa26d707", "comment": "Malware payload (Mirai)", "value": "020bc0672e2e532bf82d3997ad0a3af0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "6c437628-a34c-4f80-8a7d-eceab2342ad3", "comment": "Malware payload (Mirai)", "value": "e4a6d32addb98d951d353880e05a080fa8cdeda2118b8e7937832fa9417c8e60", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "38cb072c-f5b8-4127-86d2-014ec7db46b2", "value": "T1DA53931A2A658FADF76C873487B74E22979933D727E1C644D15CED001FA038DA41FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "c202633a-08cd-4efb-b630-04e3b886d5b5", "value": "1536:9MBsS3xH6nd3uvImjxFM1S6BcLPuOJqf3J3rN:63andevVxFXmOJEZ7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371880, "uuid": "61bc1b16-8228-4468-8de9-0a2d623fb415", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "9f3eeb22-6e14-40ab-bac2-65eaf2ace793", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e526e9da-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "3e80b0e0-75e8-41c1-81a9-35e997d251db", "comment": "Malware payload (Mirai)", "value": "c5dd72c21672c0106052ca5d314f4bbe", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "e4058dc2-2a4b-4395-91eb-37b504d46808", "comment": "Malware payload (Mirai)", "value": "4885331407de9b6c53c1745baf61d02cee868378f20e9d4e52f9319af7e57d62", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "8a04f734-5ba9-4797-ab7f-a75581b4b8b0", "value": "T16F230894B9819A17C6D0537BFE0E42CD3726A388E2DE3313DD225F6537CB92B0AA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "c37b2368-776c-488c-8509-242e812c20ce", "value": "768:jQGsyO5cPVQEYJVvKwtPFVcmlu6JjnNCR6gPj5+uB4Pl5Q1zL0lkb8FWBMcEZz3:Ux+kvH1c76JJMPj5+uBaluyyb8UBUD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371880, "uuid": "ab41f45f-e745-46e3-bd09-dd8aa06f6c9d", "value": 47936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "d70d07e1-f53f-4bca-9c25-1301695bbd32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfb0a2b5-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "59b9e975-acd9-487b-8ccb-38f0bac792a9", "comment": "Malware payload (Mirai)", "value": "cbc2cb622969bf5a48fd84fd8372df23", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "be6b1b0f-6f29-46e1-a819-44be6adb4f73", "comment": "Malware payload (Mirai)", "value": "c2acf0de72dfd618430422265f411c51618fbeb721cf8460c4cf34e1e3b70077", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "de35d07f-25fe-4a9a-89d5-6ab13bd8afac", "value": "T12143F89AF9C28B15C5D412BFFE0E118D3313676CE3DE72139D205B246BCA56B0A7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "65f64fa6-9ddb-4097-b055-f17fe7a98493", "value": "1536:TUnzbXpccgjH/w83UQkDkzwIuiMtnlK1nL:eXOcOf9utnlK1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371880, "uuid": "0890877b-56a2-46d6-a019-dd9750c8ca45", "value": 58744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371880, "uuid": "3f162390-79a9-4933-8821-a957ca7ad854", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfaa9f1e-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "fcdcdd9f-1ce7-4241-88fb-009361287989", "comment": "Malware payload (Mirai)", "value": "c5f22148c28aedd723f026a5616ef707", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "6d4d2058-6289-4585-a2a9-0f2238050fa0", "comment": "Malware payload (Mirai)", "value": "4e965cf78d36680d88890fc0df2e41d81f289c407eae66bb4749532f04240e92", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "cbbd5eec-0473-4027-91df-a19c3456f581", "value": "T1C91339D6B400AD7DF85FE77EC0430A0AB531B65505831A3762A3FDB76C322A85D76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "b9eab163-0176-4cb1-8056-98be3539d3a9", "value": "768:Oqh/D4t0MoRjR6Uw0Ae+kqbcPHWluv811ZlTt/GtYYVS0aiwfXNEH:OCGWFG5elVHWkv8117t/GTclzeH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "d1e39b1d-2cff-408e-9006-a5bf572fa5d3", "value": 45512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "3dca7ede-65af-4df9-8889-bc4a3215676d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52ed458-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "55cbd007-4a0f-4a8c-a762-162528e27b56", "comment": "Malware payload (Mirai)", "value": "0f715390ea658ceb87f29aabff167e1d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "55ca4ee3-19e9-4a84-baec-7f6fe9f55b6a", "comment": "Malware payload (Mirai)", "value": "12bad2f53d559715b93055ddcc760356e5d190dcbf9c0756d1ec46eecbfdf179", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "7a996073-7b34-4a64-a1ca-2566f956940e", "value": "T13103AE53C93A2D94C62985B4F8219B3E1B53E945E6936FD6D826C274C403F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "4c1b0f51-849d-4fcb-b82e-b13bf591d56b", "value": "768:AUcaeds3+AuYK6yXPl3uDxmvkR9AKblZ3ay3VJ5ewoUJGJrfUvC5YAqP6:ADDdsOAYlv2AKquC/O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "e1af3c53-846d-49ad-970c-dd4ce0f653d4", "value": 39904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "3b8e0579-2b76-4615-8324-28480a5b66a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dae4e71e-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "7f44a3d6-c932-4894-a0b9-958cddc7de6e", "comment": "Malware payload (Mirai)", "value": "4b243058f29140c39f8463f8082df0d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "535387a5-d3dc-4d6f-a7d2-4cc517ddeca7", "comment": "Malware payload (Mirai)", "value": "ac6e1a950f2dd10cfa23400baf947e566963e7ec5cebd79d89920a2a414f8598", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "e3930325-3010-4e46-8814-ac0868ac39e8", "value": "T11D144C02731C0A43C15B6EF02AFB17F183ABED5019A2A544F62EFE846372FB15549F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "f3020987-8076-4d45-9e3f-2ce0e15ee275", "value": "6144:K1ecpy3K9YxUhV3Z11PlHmiK4dEhjiz1A2LNNRt1:qoaPZrlHmiK4dEhjiz1A2LNNRt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "e7aa3a2d-e877-4753-bb16-1b873690c8ff", "value": 208083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "4fa962e0-978f-4fd4-8e1a-93f94808bc31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf04fce-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "376087a6-3a17-4de8-9af9-5bcc65c078f1", "comment": "Malware payload (Mirai)", "value": "fb8be54981111af061ca505448addd83", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "e4f18894-ac1d-4f15-baa6-27cf247a8906", "comment": "Malware payload (Mirai)", "value": "dd8af6e315aa69a6bc69be239bd0aafde8f806f71efa1d4219c97466327baf23", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "599f3c73-7fb4-40c2-9c49-d4c4f8d6cb05", "value": "T12A241B01B9518F53C5C32BB7BB9F42993732676897DB3302EA24BE742F4668D1E392", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "c3b85c9e-8a6d-4296-ba6a-7fbc417c46a0", "value": "6144:OTHffa/k3VAsomSiWOL8/2abmKHgvtZmHl1SMwV+UH1:Oj3VAk5BmbmKHgvtwHl1SMwV+UH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "29d00693-d675-467f-aceb-7a8203f5c470", "value": 222058, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "003fe40a-3bce-4f2d-aad9-03d0c68ce544", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf1f176-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "c2713d6d-4b92-4f87-aba3-5648f328d53f", "comment": "Malware payload (Mirai)", "value": "37fa263686df763a9a9911b16c4ed1aa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "626eb280-1193-4ef8-95f2-658921fa148d", "comment": "Malware payload (Mirai)", "value": "de687bd41643ca6ace6c5719d3d4b74ed70827f514918d4aea0bfa166019377c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "dc6eeedc-1fbe-4b6e-acd6-75ed77531270", "value": "T1C934C81A3E228F6EF26D877047F34A31976977D617E2D644E26CE6101F2038D641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "52082711-2249-4e68-b761-fc3bbdef9d2b", "value": "6144:razJkSnx2vDxXo8yYp+TJJWo1wWp5GqohWPkzv7MlA0:r6JkM0tXo1n1wWp5GqohWPkzv7MlA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "b4a4b7c6-8354-4028-9ba1-930ea13ee223", "value": 252946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "09e4c72c-08b7-4499-ba81-ba1d4246cd2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf2cda4-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "8dc4d789-ffa3-456f-b470-603b936b4e51", "comment": "Malware payload (Mirai)", "value": "81c45aa64c8e22ce79333e4a61dd34b6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "6194d72f-8332-4613-85f0-59c1e4d17278", "comment": "Malware payload (Mirai)", "value": "da99cf5da459c766afd8ebe9ba597ef2089d29ca275ae4f869a7859a1ce2ce2f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "f14c89b8-f14f-4a30-bd66-68557bf3e294", "value": "T193242A46AA408B13C0D72BBAFBDF424533339B64D7E763059528AFB43F8679A4F625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "92e939d7-a48d-4171-9ca7-9f04710f0f9f", "value": "6144:qsUejCTINfsGald9t/Btc5Z/UhWIHpbbM/RCKsN:qsvjNfsGaz9t/BtcTsc6bQ/8KsN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "c52d5b11-8d6a-468a-afac-e355f7085a85", "value": 211348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "bae36b1e-fce4-42b5-bd79-1b523a611b42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5535cfd2-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "e06daf6c-a60a-4b82-bbbe-44c74fa8932d", "comment": "Malware payload (Mirai)", "value": "b1afe1bcd2829d5969c0f3b52d572c81", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "f6ff908f-c051-4617-9a23-1108a807e586", "comment": "Malware payload (Mirai)", "value": "3869489d81285d1123b6b6054f37021840f840e3313123c17a2ec79edf8ee2b0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "499dd318-08fc-4e4b-87f9-ba36e8a7c242", "value": "T1C9937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "9d6fb3dc-c893-48da-b004-4990dbbaaab8", "value": "1536:W/QCZaxGdvts3i5JPhogAxPu++AjloUIKqI4FrS4LSa:WYCZa8dvm3oJPh1AxP5JlKKfUmDa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "3cc8c464-711e-426c-be40-5df9a0acb0cd", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "71764687-ef61-43a1-b297-42257a0cb68b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db214c5b-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "fba6b8ef-b13e-4704-aaa2-3058fd5e05a2", "comment": "Malware payload (Mirai)", "value": "44f57b8e823df2844b65399fa934c79f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "bb75bb48-defc-459e-8638-ce513dc7f756", "comment": "Malware payload (Mirai)", "value": "273cc74d5ad6460618d04958b76ca05c31e91b56458dab61d33e413fae949524", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "d4af76e7-de24-48af-a7af-26019fd17c5a", "value": "T161433C92F89245AAC6D117B6771A978B33A26369C2CF7313CC080B5077C964F4E67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "e542b07a-9fed-4660-bb3b-51f7baa65440", "value": "768:L2uoWscL7J6liNNPrso8dqmFYEPhZaqTtsXr9PK8/4Q87MT2Fk0nEzyd:LABcLeijYPocPLSXr9PK8ckd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "a95c95f1-420d-4422-b921-caacfe3f175e", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "eaef2f85-143e-4e19-b1a9-a51c1deda2d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db22cd17-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "05e67bf2-6f53-463b-a2d9-f1ce99e2fa3d", "comment": "Malware payload (Mirai)", "value": "96034c058cef2a22bba054c6e922344f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "fb69a8b2-d526-4517-8ae6-a2fe2e76090c", "comment": "Malware payload (Mirai)", "value": "c04b716fee11613f030d117a7738b747b2d77faf16d86147a60b2ec099662553", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "a2ff9019-4a2c-4b10-9697-10c798d4932e", "value": "T1EFC43A59A8419791D1D02BBBFF1D934873131B38E2EFB1069D196B246BEBC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "3f0a3652-5faf-40ab-b4bc-137c750443a0", "value": "12288:f/teOjRhLdTaJsBBHC/j97EhKbRpuUNlhKdPCCmtL4oarREFQOG+GIeRWd:fpdTaMBHCi0uUgCFGQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371881, "uuid": "f98bc5b3-bfd8-4892-b26b-f7a938671e2b", "value": 585124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371881, "uuid": "38d2a905-b268-49e9-82aa-c72c180a8c6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db456fb6-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "69d7e188-a438-40df-a847-a30d552fef92", "comment": "Malware payload", "value": "a368c82f11a7f0a6124c6de9fc772dbe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "b7d2c69d-1be1-46eb-8878-4e94fb7313dc", "comment": "Malware payload", "value": "1d1e497cfe079ff49903a7cf5b31b2333f79a3262a23da43f93cd3709049fb5b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "f4641746-9295-47ad-aa29-e6fc8bda840e", "value": "T1F2632B81FC904E6BC5D87B79B66F519D3721A3F8C3CA3306D5108B342FCE99A0A65B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "09e284c9-a7a1-4d71-aa42-d3c574450aac", "value": "768:6+vHi08v4VQTg9JVCTtJutXdHEDXgNX3O/ntyb3Gn8G12jnWOUndm6QJWDmu4Xsd:LaNuvj3GntyaaqOhXuWCOK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371882, "uuid": "7abc6644-c48f-4bcc-86b7-c768148848d1", "value": 67408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "1a59fcdc-6039-424a-944a-f74a977bfb97", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db4c10b5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "98ca29f2-b169-4434-be12-e38279d7d323", "comment": "Malware payload", "value": "52acbfacbdf145b4385dcae6c5d7024e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "7308b5e4-35f3-445e-9dd7-8e31c6bb289f", "comment": "Malware payload", "value": "aeec4ed67f924179461e095e01b7dcd9639cb6186b06c9e65f1333f3721512a6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "fc8e3edc-dc29-4ec2-bfc8-73707845be2e", "value": "T1EDB44B55F8809FA1C6D1297AF64D42AC331747B9C2E7B20689254B343BEB86B0F3B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "96843a3c-8e1e-4745-819a-582af19facc9", "value": "12288:C3spjUy7S0XcvSCdbXSnPXii72BENRS2sDb428SC6pt2oQ:T6qumt2eS2sHeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371882, "uuid": "6c60bec0-4303-402c-9d99-3bfea8527021", "value": 529596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "79b3bebc-77bf-42b1-814c-c7423de98dfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db622ff4-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "1a9db02b-4016-4da0-8777-4e0654c27960", "comment": "Malware payload", "value": "8294d02fa6761178b8429c2adef73dc6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "ea18de76-2f9e-476a-8cad-d21018eec642", "comment": "Malware payload", "value": "adfbc4fa75f3428a8b1da925666a3c0af0453617dbbaf7ef9d9ba51ef646e9de", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "f77714d7-759f-415e-b21a-96a1ef4f787c", "value": "T1B7F45BC5EAD2C0F1E55701F00CDFABEA0A34A3224057DAF7E6CC1A627861B525E5B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "63a6b8d4-9a4a-44e3-8f03-7a138f7cb9b8", "value": "12288:ZfBAUQPxh3bhcILtHjzssvXOc86pcA0mqkh21xRyT5Rby:ZfGUsh3bh/RHjgMY6pc4we", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371882, "uuid": "ab1332e5-4090-4f09-b83b-b241139925a8", "value": 733960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "44836316-5e82-4981-af12-f1661d83639b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db633b56-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "ad01d2b7-3ac5-4767-bf4c-487d9223eff1", "comment": "Malware payload", "value": "508f5244db59790852a31f95bd77b908", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "ae40e62d-c1e2-4315-b7fc-4be29962d382", "comment": "Malware payload", "value": "dc4708f9fafafb4cf22e218702b2c7a6beca5af347b8cece7a5ebcb552b919fa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "5fa23247-968c-476a-a319-6eefe161519c", "value": "T190D45C63F721CF94E364D27045F38B555AA421A31EE394C2A3BCC6207B50A6E2D5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "e44b84b0-ed3c-4789-8748-5e512494bb78", "value": "12288:6p2cxZ7tSlVTU4CoBBmWKx8Eqo0Zi4ZgppnJMWbd:EnztcY4CsmWC3qo0Zi4kMWR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371882, "uuid": "714abcca-0a84-4618-bb5d-92afc3d246b3", "value": 644456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "27a63d20-8cd4-4c89-89e7-386e4d8327b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db9a25b5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "bc9fff51-eba8-4604-881f-dbc401a57b0a", "comment": "Malware payload (Mirai)", "value": "23e175a4f71da9b278f6bfa6a96bc54d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "e7b55708-3cad-4ed5-89a5-597265202ec9", "comment": "Malware payload (Mirai)", "value": "fc7722775bcd21ebb095c2c82412c749df5a71e414758d33d20ea28629419a19", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "db871971-53bf-4156-8415-d5931fe5a2eb", "value": "T16E241C01B9518F63C5C72BB7FB9F46993733672487EB3301E628AE742F4669D0E2A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "5205b443-b46a-46bf-946e-eb0c7d9a6167", "value": "6144:9jqSNPNA3Ms3l3GnKM/obVKHmEqZ0ik18Hbs1dS1:9+CPNAJ13QKtbVKHmEqCik18Hbs1dS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371882, "uuid": "36162ccd-7555-435f-9f72-be7f4962e988", "value": 214059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "1f73b9a6-383e-4db8-8a3c-fecf9ab1a72e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dba90dc5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "f9f13e55-b6cd-4594-aef9-a3386f1d72e6", "comment": "Malware payload (Mirai)", "value": "5839365746803299833767a0de30e19d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "f90222e1-6170-485b-b188-517a405ab64b", "comment": "Malware payload (Mirai)", "value": "1a74fbed399b0392452a4f907798b57ab992fb83b3f44135b43f328c699c28ec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "b4efe34f-3d2d-4569-9c28-a2bb78a45bc2", "value": "T178341902A9518E53C5C21B7ABB5F42593733AB3497DB3301DA24BFB42F4B6DE0E2A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "5c541e5d-3612-4413-bd7a-292c1decc857", "value": "6144:SA0mTobygfgamgx/FWjqSNQ8ZuvZfljSpmWKhODZI0K11OoNc:SAwbDfgaj/kjqMExSpmWKhOD60K11OoG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371882, "uuid": "8b9c1d6f-d807-4fb8-a2b8-7f39cbd8d06c", "value": 232166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371882, "uuid": "d45b47ad-ccb5-4559-a341-b1675f04cda0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dccb2404-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "49f3cdc1-3d62-4ed5-bdc7-92e269bab94d", "comment": "Malware payload", "value": "b9eceea419d048378fd8c5cfdc464027", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "bdd0e7c7-2559-4d97-92b5-fb854e3cdeac", "comment": "Malware payload", "value": "0865bc35c7eb69b4658858e09e55419f54c511b3a5b8df295dd0d1af38d56e3d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "b1767a7d-2c12-48bb-9b17-dc384a368d1b", "value": "T1A3F46D1BB6E370FCC667C13043AB9A72B932B46502216F7F95C4DA312E26E602719F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "a15ae06f-e817-4f75-9e5c-894c11f43b34", "value": "12288:0WPp0/KePFLgl/4a45KqdT00DZwmUAhPyb7c5Hm:0WPpZePhgl/4aMdT00DimUz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371884, "uuid": "52b6d510-4bb0-4f8d-9647-9dd5333386a6", "value": 737536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "cef12064-603f-4054-9f9d-b14d080363eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcdfbffe-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775371884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "72e28335-4b8a-465d-a746-8dc54f664241", "comment": "Malware payload", "value": "d3765b9346dbaff6655403c0c63d6422", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "f7518303-8b55-49d4-95a0-540bbadf3ab8", "comment": "Malware payload", "value": "5f3a5f55199097cb797548e54412d69fcd0b29ca5ebf6feb6c000a3cbd7b9a40", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "0bbb1641-57f2-471b-a305-9ef9f0ab4607", "value": "T166B44B55F880DFA1C6C1257AF64D42AC33174BB9D2E7B20689254B343BEB86B0F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "c81a7750-1648-4d74-b605-768a84101709", "value": "12288:4gk9FcgS0Xc3CzrEVnP9xdLtAk1S2mPHFzUC6pt2otvJ7:DpSOlt9S2mfpE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371884, "uuid": "d57418e4-0068-4d3e-8124-ce155586f12d", "value": 529596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "4b1b6f46-8cdb-4283-a3ba-b07eb0a251d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dce1d4a2-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "08ee821e-8601-4796-8e18-b3375c6fd71d", "comment": "Malware payload (Mirai)", "value": "c5bd4e19cb082e4d04f96ac2deef9049", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "bd293db7-e523-4b7c-96d3-f2817f591841", "comment": "Malware payload (Mirai)", "value": "1fed4455203f013bed0cf2c48056bd58cd9dc4f1f5311e7264fad43a35a78fca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "34cbaab6-bee3-4734-9ce6-c1536336878c", "value": "T1CC056A85EAC3C0F1E45704F01CDFEBEA0A34A3264457DAF6D2DC2962B861B924E573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "826159b3-3758-4c6a-85de-395c0f591395", "value": "12288:1z9EsM793vhLchXLMCRkHOg5DVrNe+CaHo5VOd60I1NUVB7pRyI5lpby:1elfhLchbMCRkug5DVrtC5VOdO+57", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371884, "uuid": "0af6d758-c136-4b59-bdf6-618c6bfe19ee", "value": 811784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371884, "uuid": "8520b1f4-6b88-4cdf-a94c-ab1357ee6dec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfacacd7-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "fca0dc6d-2141-4ca7-ae15-7fb096ec97ce", "comment": "Malware payload (Mirai)", "value": "a63e6e67382746d11807656c980c510f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "d2ef898d-f47e-482a-8933-113fbbacdc71", "comment": "Malware payload (Mirai)", "value": "af13b739773d218822065ab005d7eb7a7ff013b40c498dddc072dad0951f4793", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "663c628b-dbbe-49f5-8d90-bb032a408857", "value": "T1BD233A035492C0FDC955C230AB3FA636C922F47E123AE59D73E0BD227E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "0f67e33d-2c90-45e3-a0b6-66aca789a56d", "value": "768:FkrR8ysZAY+OGZZRY4JfyPtsIDKvv8RrACGyjltp4B6gC:6d8y2+OOOZQq8CGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371936, "uuid": "e23d4b09-a36d-4ca2-94a1-df368ead5b3c", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "5370d2c2-a457-4a7a-b49e-c067eb0bfa61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfbdfa0a-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "976b2de3-bfe7-4665-9be1-3f2eb570f744", "comment": "Malware payload (Mirai)", "value": "f639725ab3e18dc3b36ea31013e2834f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "85b27928-a055-4a86-a15d-8f53af7dd038", "comment": "Malware payload (Mirai)", "value": "446f4e4d25f2b3a99a034b1fb2b4b0fee48a82ba02346f068f2bbf5238e38f21", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "af6abd0b-7029-4b07-bb40-27d83c267969", "value": "T1DE53831AAF650FFBEC2BCD3705A91B49349C640A12A93F367934C918BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "8453947a-9b75-4a4d-8e23-c3db215e54c5", "value": "1536:SGF/Q8QKCTeDcVfR5z3XUAFo8CGHaqirZQ8yMp:ScKKC6DIHzHUSir", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371936, "uuid": "406138c7-452f-43b1-b9ca-c350fcd6445b", "value": 64364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "f99285af-1387-4b42-ba44-fd595cfb05af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb9a1018-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "7ae2502c-3700-40d5-a376-ad6b3b2606de", "comment": "Malware payload (Mirai)", "value": "1da67222e206ad8d7f3b9cf0076685bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "fa26541c-cc74-402c-bb50-37a0994402c4", "comment": "Malware payload (Mirai)", "value": "9d2c534156b9960cf377e4186f21f42cde1398a49c20a91d11d30027826c6880", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "8d7ea528-80d3-4d1b-8cb1-b9ec4e8d5f3f", "value": "T1D6044953A8A55F9BC196ABF662B39A740753E8150F430F7BB52AE9F40603DCCB8087", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "9d148597-3846-4ee0-9c0d-2033e0984e2b", "value": "3072:2hKs39/HSH5uVvLEI2wubCdWgJDVXTF8gjJWcfaRq6i44drhhR61AMLON2lN:Fy/HSH5uVvLhXoklTWgjz6i44drhhR6f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371936, "uuid": "639137a2-633a-4741-b061-2179e582adc7", "value": 187626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371936, "uuid": "4514bf0d-5a68-47c5-9f2e-e1bd3c210aeb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e34588c-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371994, "uuid": "609e2510-1873-4940-9152-249cfeec0b21", "comment": "Malware payload (Mirai)", "value": "ccdcd305c6792f963137b912b70246d6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371994, "uuid": "488fe963-1dbf-44bc-bbe6-5e61701a5908", "comment": "Malware payload (Mirai)", "value": "d6f9738bf64b2b1610a09246088965c2f1549fecbb5fa3e59a810dd441455bfa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371994, "uuid": "aaaa276b-4c4e-4b99-a9dc-a1951953c05b", "value": "T1B0B35B85E753D4B2D8470BB002A7E7395A32FC62032ADE17D76CFFB15E226C2B1566", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371994, "uuid": "bd9b34b1-084b-4eb6-8790-543907e6d867", "value": "1536:AY8CU4mAC6BRTejqkSTr9xXEKcHcTUA31QGtN+Hrn5rDqns0k/tlWYvaY2:AbCJZ6qf9GquAWdeDWWYvM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371994, "uuid": "c52b345d-a347-4741-bfae-ae6a53871d2d", "value": 117680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371994, "uuid": "855cbe36-c413-4c40-b933-308d6f2b290b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e34d39a-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775371994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371994, "uuid": "f0feb3ae-be83-4ff1-86f0-e7b895b53ca2", "comment": "Malware payload (Mirai)", "value": "eb38bfde9b432e855cfd97ead98db70d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371994, "uuid": "f354b67d-702a-4b0b-a722-9f1e768bae39", "comment": "Malware payload (Mirai)", "value": "94b5dd8587c09831c3424c797b35244ffe92818a9dc6ebd757999b5d73b9b16a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371994, "uuid": "b4e6e597-a6d3-4359-8b42-976deae2bdf6", "value": "T147E32CC1BA47C6F7D4471AB502A3673A8632EC190A2B8699F72DFDF4DB176C4B1093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371994, "uuid": "92783b1d-2271-4499-b4f9-151e76479b9c", "value": "3072:LRAKHSATxRj9wUsSvt56wuMW5+7+/3M9fUgv:Wki2ffuN5+7+/3M9fUgv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371994, "uuid": "d369e0ea-2fba-47aa-9901-f1c6ff8d074e", "value": 155552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371994, "uuid": "c99df059-3ee7-44c4-a782-ae55a7be4036", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f47b9081-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775372353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "07f5b995-d4de-42d4-bed2-c907e53f3894", "comment": "Malware payload", "value": "80cfa9367886ec668a75247e800e4ca5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f0957445-8f10-4a66-bc0f-3ab4353a5072", "comment": "Malware payload", "value": "ab698b304b010b6996f56197d08a254558b6bcc0694249c5495b2d624e55a827", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "2de8f397-657f-4d91-976c-c725421d6fd8", "value": "T11C916285174346E53F3D9A22ABDEC72C73448DD998806FC5F5EEF5A04E88CC62CA41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "37f5d1ae-f0a8-471a-9f9d-4ba0ece852ed", "value": "48:v4UlUR4lUQUkEUSUhUFUgUZUyU6UvUbUBn:v4UlUAUQUkEUSUhUFUgUZUyU6UvUbUBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372353, "uuid": "e4a08622-9a07-481d-aea1-9c2313438146", "value": 4230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "0f60a68f-e42c-49a7-b521-a40fe388f1b0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f47c62a6-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "13053c09-067d-433b-af96-a4ca29982430", "comment": "Malware payload (Mirai)", "value": "9f821f33bbf3103dc3ced67feda033a1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "3307525d-d583-479c-86f7-f9fa80003d4c", "comment": "Malware payload (Mirai)", "value": "283bbdeea3fc35974cda8563327174dcfd65a7a1c2dba32bf7dff34543959bcb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "c4b01a90-3128-458c-8aae-42e82c1c0be4", "value": "T12E01FC8921B0107275AB98EE4AB38C5D30C590653D863DFD3CEEA9D72595CD0B0520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "808fc5ce-8b02-40ab-aa5f-b872a46329e0", "value": "12:YkF1kcClZF70SIHFKHFpHFWHFS9kMFM5gFNHFSXkMFMDgFNA1LRPb:ZDkH/FbIHFKHFpHFWHFMFFM5gFNHFGFe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372353, "uuid": "9590bfc2-57e9-461a-956b-12bc6ba07239", "value": 744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "a1b58806-5b46-4acf-ac25-4314b8ea9dcb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f47e8cd7-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775372353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "136dbbaa-032e-4d30-b12c-05d6b2f8d15d", "comment": "Malware payload", "value": "7047bd2555e20ecd5599429c9b376729", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f3070166-4a78-4289-a9b1-e2032ef2800d", "comment": "Malware payload", "value": "d132863619295fcb5a103bf9f58be0507422493115947e76f33549561467f403", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "db61c711-7a52-41b1-a2c2-0c7bf417ba4e", "value": "T101B0129B20346204C5047C0414770A6D215382C534AC0E0954F40720CD44108B440D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "81d6dc1f-c345-4335-b0fe-5b9056769639", "value": "3:LtKDQNUC3cweFGBzSEyLTUWOvn:LD4gII", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372353, "uuid": "1aca5941-57fa-47c6-b58e-f13b5b8ea0b0", "value": 89, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "950a838d-eaa9-484c-a381-3ae82b809ec2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f47f658d-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775372353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "7d483265-d3ae-44de-865a-deb0d4ce176f", "comment": "Malware payload", "value": "b91b53a18d8c897e6bcbb19587bb024e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "fcc57cbd-7afc-4a8e-b649-fbb4868f0657", "comment": "Malware payload", "value": "fe62c969bd572eec037af94531c81ebf377df54c0704e9965fd6a8594d18ccc4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "33cc90d3-629c-447f-9854-b58970f3b5ff", "value": "T167C08C8A4460A7F0D284AC4870B7023BA243F3C822F82F0ED29502628C85000F510F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "2a38c838-55f0-4b27-9777-55928bb748b1", "value": "3:6X26JZARFacweFGBzSEyLTUWOfcDe8BzSE8eUrKKE:N6J+jbgImURKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372353, "uuid": "3b235273-ad01-4aa0-969c-c64c02b1a531", "value": 151, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "d5b1654a-9e2d-41aa-bd37-259eee52c565", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f47f8a45-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "01908e44-b47b-446b-91e5-a27dd8499c51", "comment": "Malware payload (Mirai)", "value": "4269ea8b1787afb0c8dc4ada78a452ba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "9f7ccc20-ba22-4a41-84b8-51bbd6e6aef2", "comment": "Malware payload (Mirai)", "value": "351ba524ddb47bfe00a8801d7b8f866967ee5756f5dfccf8c3dfee8c3f05b7a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "c84604fc-5e6e-4339-9d9f-794ebe7f118c", "value": "T1A4517786003157781CF7AB2FF6F56198B0D1506634E56F48C6D839B54F8ED54BC407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "87312f92-25c0-4fad-b606-fd4f74378764", "value": "48:vPmD0PPW9bPfAfFahPgAgFLhPdUfPlsHPZep4PiXsP90/PO7WPjy9PPWPPkR+PIu:vPmD0PPW9bP4NGPXu9PdUfPlsHPMp4Pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372353, "uuid": "fa4aae1d-c047-4d77-987a-4d7679b6f3a1", "value": 2866, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372353, "uuid": "672211a4-ec0d-4c9e-b40a-ac7e4231a3e2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16971cac-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372411, "uuid": "52bb1de4-4202-4733-b79c-440cd8dcc5e0", "comment": "Malware payload (Mirai)", "value": "1f78836824edc62ad36f748513ddf43b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372411, "uuid": "b4f833d2-45bb-45fa-90bc-0201adb347c3", "comment": "Malware payload (Mirai)", "value": "0d6de37790878c4eb5eef3191215e6d5258136db59240b699dd131a481e01236", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372411, "uuid": "5ad1bdad-82f9-4237-b29c-10b15914d625", "value": "T12EC31906B30C0947D1632EF43A3F67E097EF9AC121E4F640255F9B8A91B1E325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372411, "uuid": "39d2d0eb-7e31-45d2-ad4c-82a27659bd42", "value": "1536:h6sndGNS+Bvxu1RxFvIsroTpKvAD/TWeZad78/nqulPEQdmo58kkPhz:Sz41Rx2uoT9DtKwNOPhz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372411, "uuid": "fe62becd-9f51-41f5-8958-96d5d805677f", "value": 129716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372411, "uuid": "c422ce10-b287-4c68-b88b-301177d898fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16a485b6-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372411, "uuid": "117567c8-53c1-414a-b11d-9d2ced691bf5", "comment": "Malware payload (Mirai)", "value": "57c48a0d3c52ec8bf275eb7263408ebd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372411, "uuid": "9c5145a2-e6c0-4f24-9c3c-b29f7b572f43", "comment": "Malware payload (Mirai)", "value": "fbf6c5ee6886c58db833a2801eac9f6fe2ba8b299c3af140aa1026e8360cbc5c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372411, "uuid": "9a58e8b7-6ac3-46d7-b76f-9c57afddf130", "value": "T171B35A73D82A6F58D559D070B0B5AF752B53A681824B1FBE16B6C3B04083D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372411, "uuid": "8263e821-b11f-48c6-987b-643f8c79cb20", "value": "1536:rdM/icf1r5VXSAS8KC/8OYPLfjCaWFmeEK4shtEUs9QhW:rq6cftDS8KTOYP/CaWQer4zQhW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372411, "uuid": "23e71969-8e54-4dd6-8704-c0fb6676f7fb", "value": 113248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372411, "uuid": "28cb0b35-332f-4614-917c-47c79918739a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b9ddcdf-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "9b0078ca-afc5-4de1-b0c8-33f94c928788", "comment": "Malware payload", "value": "34acc9380ca2841e9a8065cc537358f0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "a87e2aae-0a7d-4a20-b9fa-2c178fb82715", "comment": "Malware payload", "value": "c2a305ffc33be176df559cfaf94b10fa1cbf21049485b72d8dc78150d4ef8375", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "847c2684-040c-4f37-98f0-3c861e8c10d8", "value": "T1A8F0F65DA1A8CE500AF9C49AF1B48505C4A59093A1F46BD1F28E4933AF71C4E2D536", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "0d134451-7da8-4ffd-b01d-5cdcb75c49cd", "value": "12:FH8ioNJAC7ukxGWi2jU30+0K5+A+HiTxynZhG+E6:FH8j/wWi2jz2dA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "c62444fd-1390-4e43-8f05-ca722d8d29b3", "value": 640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "59cc521b-3de4-48fd-b352-de005d2d8862", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b9e9ef5-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "577f59ff-2069-4730-bf1f-2fb0efd23ac3", "comment": "Malware payload (Mirai)", "value": "cab1af79e501983b896a51e6bf5e25e0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "2c5dd0c7-3304-4cde-af9e-04d210a40670", "comment": "Malware payload (Mirai)", "value": "f256da4be409350fadc4620c8b977355181562fd787fd3652f47080a5af54725", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "2427db2b-fcd3-4dc9-81c8-b9830df80ada", "value": "T1353190C651E2546A3DE8D94AB16FCC1E7446768E25CA5F49B8CC30F6A88CD40F0C1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "11cff348-e7ec-4f50-8967-885799361717", "value": "24:sF+RxvFtP3kF8MgApn0ttRV/5BCBMNzFEXUd5AOq:eEDt3kKMnp0tVxBCSNFGE5rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "595d1310-06c3-43ea-8a1b-b7be795f6d93", "value": 1560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "25350d06-7146-4194-bd9d-7d7078a681e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ba28870-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "acf351af-4a13-45a6-8538-02918f2bfed2", "comment": "Malware payload", "value": "e6d5a21ca945330250b728ddfb51c592", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "ace37cc4-bc21-4d3f-880e-a00f14463aee", "comment": "Malware payload", "value": "879a33fa51f1197f05f50aca4b5c934356e819fce6445dca6ee9a455422797eb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "5b326c45-ed74-44a7-8088-2d207d069ca9", "value": "T1EAE0D8CE54D1CD7038414DE7B0604906A4C7E8891A924FC4D6C8207E584DD087593F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "baeb6a18-377a-49fc-b6c4-d045faab8935", "value": "6:ebAAj73w5/KiYEGvwW2AVFhGq4XeMrg2QZrKGygt9MeuXIW/n:7AWKZHY4uqLMrg3ZrKGygt9MBXT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "981e7776-b155-4f96-bff5-701c14bd25f5", "value": 349, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "5e8b51d1-b942-4570-b055-a36a6d2a154b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bb16863-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "e32f0116-1d41-443f-9714-abe283b43f5d", "comment": "Malware payload (Gafgyt)", "value": "05cd451ba4be2d15445583e5dbbeecd5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "ea6aec0e-3ece-4f82-95cd-81be2e2e453c", "comment": "Malware payload (Gafgyt)", "value": "8a80b1d8cb6ddbd86dfff5bca5bc5a95df4501a3d299d7460f14d3cc9fa521ea", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "da9d0bdd-1fd3-4771-9258-a54a9563e217", "value": "T18241589AF19159F06DA4D81333F9944031D4A0CEA9C6AF1F28DFBBE9488DDC82A046", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "be53bfe0-0ed6-4449-8f23-ceb0fd010940", "value": "24:vGkAhGr0dSxG7GBpogG/G7TGjGvjGm8GosGvjG3GY:vDAh+ymVeeTqy589sy+1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "59bbd334-54f4-4e47-9c8b-cb12232e86f1", "value": 2085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "81324e1f-3e51-4b86-8eea-f392b60354aa", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bb34041-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "8a95c31f-2f99-4636-b73b-6f4ac8151d0d", "comment": "Malware payload (Mirai)", "value": "9540f0b4f5583d363e257b541084f639", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "d0dcac12-f6d6-4c2d-9f3f-b9d437a03844", "comment": "Malware payload (Mirai)", "value": "40c529d64204c7c638484669b041c290a966b093effbcef4074f6035ef68322c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "7e136943-a716-457b-a647-83c2df24e93a", "value": "T153D33A17B58180FDC4DAC6B44F9AF53ADD3275AC1238B16B27D4AB232E89E305F1CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "0182bf74-b45a-4820-8143-4f56dc1f9892", "value": "3072:AD/XSWia2kU7JyCxlrwWxmASBa/U96mQduSHs9dnWHGek:AD/XSWia2kU7JyCxEQmQDook", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "5bb6504d-bb0f-4c57-8311-85a2fa094c19", "value": 139192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "0368994a-b88a-472d-99d8-62608fb745d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bb4425b-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "86b02c03-8e17-42bb-b66b-101cfc1bdd19", "comment": "Malware payload (Mirai)", "value": "697d00cd9853293c6a30c7417fb22094", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "88d481a2-1bd5-464f-8e64-ce89e7048711", "comment": "Malware payload (Mirai)", "value": "8399ce18d178b03fbbfdaf775e576255732064b492680fca51ae1b8f3efda5d2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "42e4b16d-7ffe-459c-8760-bb57047658a3", "value": "T16CC30A45FC504B27C6C652BBFB5E428D3B2A17E8D3EE720399215F20378695B0D3BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "c2bd4771-977d-4407-97f3-00ee709a0e75", "value": "1536:oKEC4Q9t8WOnW4FqIL8kAL8k4Vlxp+TNuAEuE0lkgwywF6wuIiiLB8swrywr/9Gw:oKE9HoK8kk4tcJDEuQ/ix7sXAvpB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "fecbb4fa-2759-498f-b97b-908aec9fc940", "value": 129568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "fae16221-1ecd-48fc-b943-93725173850e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bb7e276-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "2cea6ba7-a8a7-40b1-9c36-23258a8aa703", "comment": "Malware payload (Mirai)", "value": "1cd067bef73cc76e87d647ef182bd0e0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "2c8f7e8d-8cb0-4949-bad9-194ffd0e7297", "comment": "Malware payload (Mirai)", "value": "7575765147a3af17e5e83196091ea140c1e1aaf1bc179a516972e9fafff8b74e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "b63dc3e2-f589-48ae-a2cc-b426537074a8", "value": "T193C30A45FC514B23C6C612B7FB9E428D3B2A57D8D3EF720399216F60378695B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "1a4f42f0-195f-4f2e-8f7b-3c18fbed57d1", "value": "1536:oKwXuG541z3ksUTYuxcwoWzA2dJ4VR53TGAWJ3mdlUJwywO6/QrrYssanJ2i3Tk8:oKwHTR0IcxWzZ4B3qAWJ2crnbTE8UaH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "615baad1-464f-4550-932b-cc33b4c48c3c", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "dcd8678d-05d7-46b6-b564-7925661417b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bc24eee-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "94805edd-d1eb-49a0-ad37-2ce3f119e452", "comment": "Malware payload (Mirai)", "value": "e641dac1194a16f0f6a03fdf58449c61", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "c171ced8-b602-42fb-afc8-42129dbc666e", "comment": "Malware payload (Mirai)", "value": "4711da2fc9115e785a39c018b44de80e32822045724c48c6be6d6e52211aa1b7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "62c7badf-e561-4177-89ea-a325f3309f09", "value": "T152835DC5F643D5F5DC4306B1603BEB335B32E0BA111AEA43D3659B32EC92641DA1AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "8040e28b-deb4-4ac5-b3b7-d7f0fc65c6a8", "value": "1536:rb9qnAElxhFY9A9x1S29zD9IVxhtIA892fS2yMq72W:v9AAEDHY9ux1SqzpOtR84a2yjSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "ed151ca8-8a21-4a26-9419-f4146aaa35af", "value": 84104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "61c48af5-77e5-4d19-810a-aac630fdc26e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bc6438f-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "a560892f-4653-408b-857e-f85c448851c8", "comment": "Malware payload (Mirai)", "value": "e45c2962eef05016e18da7ab4a8d2e47", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "00f36431-41df-46c7-b991-eed032f55353", "comment": "Malware payload (Mirai)", "value": "d05fce1f1f8766e748257480a472d1cdabc039b578e86d1a381b590b82c6c01b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "9e6676ab-73b0-494b-a486-8a90bd4a893b", "value": "T191042B45EA404B13C0D627B9F6DF42453323EB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "f43f0d63-c241-4e9d-88af-fbee9afc0489", "value": "3072:cYVektU8fiO/M03/UJxtzEN7zfadePwbTzDYywooZM/RzMH9W:cKektUvO/NPUJxtzEVfa5bTzDd9sM/Rt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "5783f792-807a-4ba0-af2b-8b072bf367b8", "value": 175632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "f9381817-bc3c-4ecb-83cc-b26ea85e2315", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bcfe635-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "7d923e44-61b1-43a1-ab88-99de3711e654", "comment": "Malware payload (Mirai)", "value": "85a84300fc956d3fe6c78eba6877bfbe", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "5f971550-bdc7-4b96-820e-f9781b052b11", "comment": "Malware payload (Mirai)", "value": "0b21d3e3198185fdc466db84c25a778ce20ee14f0a3218f102a68632cb276597", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "682837e2-0e1c-4cc6-9079-3645a0ba7f9d", "value": "T132E329C7FD00DEBAF80AE33A48530905B630B7E145925B372257797FEC3A1991563E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "7d18e028-a711-4c08-bd5a-8b74125d8781", "value": "3072:9V8OkzPUBna4S7Ac6eVEjbicLk+78grOIwbn5gvwyyLbWKY:9V8O3na4KAcaLk08L54yLqKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "e15f8f15-b729-43b6-951b-f191f7ae1d9b", "value": 144512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "eb97a449-2154-4ace-a5b6-59e95fa4619e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bd518dc-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "c6c16697-6ac3-403f-9ca9-213e955a78b2", "comment": "Malware payload (Mirai)", "value": "bbe2a6db3e2172d3e716c06a7827580b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "fb5e597f-3c4c-4126-a48b-9f58c472c6eb", "comment": "Malware payload (Mirai)", "value": "2fb1251286098d07723b3d9c94db25b72ab25ae837575c1d7bb2ecd1d2bcb54f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "4a00af42-7b24-4c0a-af2e-28d90c76bf17", "value": "T15FD30A45F8819B12D5C111BAFE1D128E37231BB8E2DE73029D246F747B8A97F0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "721e2e73-85d6-4929-83e4-4a1aa1c21a24", "value": "3072:o6e7s+U4KJ+6XZ09+uatm6o/9hcga2ob2Zbh:pe7s+Lj6Xm9+ua+/9hcgaxcbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "8b9b485b-65ae-4bef-8186-7148eea920cc", "value": 141116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "21a9145e-08e8-4326-a85f-454c09eb0077", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bd70605-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "a0c66448-0baa-4399-b2c3-b5b59e2c378c", "comment": "Malware payload (Mirai)", "value": "83c008f5dea11226c5d12b897891370e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "4e4d2313-4ba6-42fc-b3f3-dd300aa7918f", "comment": "Malware payload (Mirai)", "value": "fb9d7e25e0a20a3d6031f5574763b5998687797df354f79dbd1838a7e7057930", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "ff1e6be2-0326-4dfa-aed7-b606c653fe63", "value": "T1ADF3D916AF610FFBDCABCD3706E9070139CC654B22A53B763674D528F54A60B8AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "793bf903-440e-40a5-bb7f-f1a7c1cd3436", "value": "1536:cYXaTo34/X/q0hcx9tyb2KHcllIzWZ9vq/GzJXyTfea6gO0x0Ie+RKFiN:c6aTmmXbWx2W5zgT2aZ/iIiFiN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372419, "uuid": "f14c1486-3967-4498-b03b-c3d8377d8d79", "value": 169192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372419, "uuid": "ed907935-d1a6-4746-bc18-b15cf871f923", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f7ce44a-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775372533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372533, "uuid": "778ca7fb-b950-4280-9dc1-8d8197429bb4", "comment": "Malware payload (Mirai)", "value": "e7b38464b92b38a39179df18891e5893", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372533, "uuid": "292a5b44-96d8-48cb-a3f3-ad2a39e16aa6", "comment": "Malware payload (Mirai)", "value": "dd3ba916987a14081e94e59979413bd749bbbf9abadd011dbed9935e1ad2c037", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372533, "uuid": "cde8b073-8457-4d9d-8dba-d5757ddc4120", "value": "T169141902631C0A43D14B5DF02AFB17F183ABED1119E6A544F61EFE886772FB1950AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372533, "uuid": "647709b7-a1b6-4e55-95f5-8b18e9b37671", "value": "6144:IYa0xZnsxFFQdcxPEmiK4dEhjiz1A2LNNRt1:I7/QdGPEmiK4dEhjiz1A2LNNRt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372533, "uuid": "fae8372d-6aac-406c-b500-f4491caf999b", "value": 208083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372533, "uuid": "6b8d97f9-6b2d-4c08-87e6-60c5aa7caca1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f83b97b-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775372533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372533, "uuid": "6d90f564-6d2c-41d7-894f-bf590f52a970", "comment": "Malware payload", "value": "ee3e8852082f82526175e3e3b5eced2f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372533, "uuid": "42e5ca4f-a802-4b77-b063-9b8e98d0b876", "comment": "Malware payload", "value": "b501d1f5c5cbe7405d93686eeef38095bf303b1c86b842653f030d9ddf83a077", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372533, "uuid": "2ec7a93e-47d1-4464-b0c2-7dc2c6d2cec1", "value": "T153D012C405602DF525AF896123E542CAF6099190E3D54FCAD3C469613228DA0BDE4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372533, "uuid": "39cb42a6-d27b-42a7-bd0e-92b98bcae844", "value": "6:cwKj969jX+QjlrFH7jXX7U9jX+QbrZ3djX1WNFIQyxn:5K09jXRFH7jXrU9jXHZ3djXENy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372533, "uuid": "aaa2e2f3-6609-489c-ac3c-ab238a29a6b8", "value": 258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372533, "uuid": "d2148b83-97c4-4e38-b83c-707a00d8db6e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7febf6f-301c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775373138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "891f8dd8-01fc-48a8-a42e-09433bf3dcad", "comment": "Malware payload (Mirai)", "value": "0389dff068ea8f6cf4ddc4b00aad0d9f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "6232cd45-b49d-4057-94a6-113d7913869a", "comment": "Malware payload (Mirai)", "value": "a2e39a970e40ea24d2516d09447a186147c4b123b38707406f0e7daa2e664692", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373138, "uuid": "b38ecc4e-b9e3-4a19-b542-858eb1e91782", "value": "T138F3985E6E128F7EF668873047F78D21A76C23DA26E1D645D2ACC1105E2029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373138, "uuid": "fc36d882-268c-4d83-81da-a9ef74ab7d95", "value": "1536:Zq/Bpmz3dmp6iHkopmKoyz9dbYO7W8sCvZgTgKdZPHXxP8ne3WNecXIV:Z0pmQpMypdbYO7W8P+ZP3xP8LNec8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373138, "uuid": "b4552379-7ef2-4aa2-9e03-ad99de6934ec", "value": 169192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373138, "uuid": "399dee51-1801-4483-b31f-20a1a5bae65d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935002ea-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "f65b622f-acee-42cf-9936-2eb186059e15", "comment": "Malware payload (Mirai)", "value": "c558d12d5158779a8abb3a3804409804", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "2f2caded-c957-4828-9d1c-daffda1d7631", "comment": "Malware payload (Mirai)", "value": "4f10d73baf67716fabc2fe86b8d603523b70f716fc19d77af3e040870b148072", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "82fe377c-95e1-48a7-ab47-d5a12c5cce10", "value": "T185836CC6FB43D4F4E8120971217BE7318A73E53D502AEE83C769A872BD12541E75A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "a7bbca75-3d63-433b-ac5a-4ae5749773c2", "value": "1536:4NGfle9cPS43Sy6QYXVE143RrFUCeWtsrswWdZ6:4cEWS2Sy6QY6143RhUCeAsz7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375886, "uuid": "97671ee6-49db-4cb3-9791-2d5402b90ada", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "928fa10b-d890-4ecf-b183-c82d2625ceec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932d52c0-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "d9bb1af9-b5ba-4e3a-b3c6-d19ba4b5cbfe", "comment": "Malware payload (Mirai)", "value": "e8c415b4cc959b16c98bb53aa58d4ad3", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "91fa77af-7967-4181-8b84-1ad0f3ace9d7", "comment": "Malware payload (Mirai)", "value": "12ead33440cbf019a3731d09bbdb9de0fb97316323d3758a12ab9caa69eee154", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "c84d931f-462c-4d2a-9b71-3e63d3cb784c", "value": "T109432C95FC9245A9C7C117BA771A968A336263A9C2CF7313CC0C0B5176C9A4F4E6BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "3fe7a8a1-ffe0-4633-9ec4-bd468c117150", "value": "768:cVgcik7nohvan+Ybl8dGsf/eMZr5IrdJKZ6n43767oM72F30nIz3:cVgcikav67ekgecNIrdJKZ63o0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375886, "uuid": "1e8625cd-1f91-484d-b9cc-6a56ee1f1e47", "value": 55344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "3bbfaa4f-06e9-47ba-9732-029003936809", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8557ab7-2e16-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "11fa961c-aa2c-456e-a70a-a8a1f6c63db0", "comment": "Malware payload (Mirai)", "value": "6fc4228cb8868661ea4510e5db43de13", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "13066f73-796c-4eb7-8e01-a77d3ebdb9e1", "comment": "Malware payload (Mirai)", "value": "f7c3f7f576203c39b4524a46da6b7693f83b58efa5da9b0c3d63ad8e878b3b6c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "775a81db-9c5e-4632-89c8-2c2b88ff449f", "value": "T1DBE21A13B1280B2FC8D20230142E47954BBE96C556E4B5CFE67F57B21AB1E2A2C56F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "405ecd04-513d-4d5d-8ae6-8ceb2a4e8ad5", "value": "384:tQb9H/kqRo+IRIqgW98hgRTDPDuUT4ufXctw3BS8gE8v7N7bAodvc2hQVZ3w7zj:tEGPRI88+RTttk7zBhQVdw7n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375886, "uuid": "e8c1076c-d9d2-4735-81ad-21b1979e043b", "value": 32344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375886, "uuid": "59cada83-0ff1-419f-a1e7-2ad4fc422d97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "806cd833-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "0376f878-e7c8-4389-85a5-d7380496cb80", "comment": "Malware payload (Mirai)", "value": "23319481362fa32f9a1486e9f2b91380", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "379869f6-e8bc-4825-aa96-286a107c9b34", "comment": "Malware payload (Mirai)", "value": "5d4f85b6a04e4f1ca86807b4ccc00292f194a2f288d2f7582c665cf6cc20905c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "413f3c43-8133-4156-ab16-72828d1f9081", "value": "T12DF2E751B8928237C1E112B9B7AE5A8E373573E8D2CBB317E82107607B8561F4E53F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "024661a9-e5d0-481f-98a6-b5989c57344d", "value": "768:jSL3pPJKXWnLm25RmiIu6xV/mKZhUhbyno6+w7:+1BKwRbmiIuXKXUhbyR7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "877b1584-943d-4e71-8981-86c2a49bc1a9", "value": 35960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "5c1bf24c-8714-4b49-87f3-41899cf57627", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f401414-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "22af1209-1b99-4859-95c6-a6a8c2b8fe0b", "comment": "Malware payload (Mirai)", "value": "173c708a0dce62b59597aebc81fae5a3", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "b8e5e405-66f5-4967-be93-7c81ac094b8d", "comment": "Malware payload (Mirai)", "value": "0d2cb19d3edbc84bb321695479263f8dca95f3666a5c085efc6760f3ebc39326", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "4bb4142e-2795-4f74-a38d-80f662c9ee73", "value": "T1D9935C13B9C480FCC849C13087AFB536D963F17E1279B29B73D4EA127E8DE511E6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "926123ad-da08-44f5-8f82-1b4f61facfc7", "value": "1536:yc50J45j1WS60TzxMyQk8TCzyRgQQ1h1Ms6fuftHHZlmpnahB:vf5j1W0TzxV8QyR+1h1Ms6feHHXmQT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "4d5b1136-1864-4de3-ae16-21e90cf303b3", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "31e239bb-d75e-4c72-8855-3d4a91373b40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931a3deb-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "6626928f-0382-471d-912c-49542216fbf0", "comment": "Malware payload (Mirai)", "value": "7c7143981bd8c9cc0b2138cd48da50f0", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "7466fe4f-b3bb-4c93-a591-709f5e7caff3", "comment": "Malware payload (Mirai)", "value": "a64b89f5c5b128af2e9511b8884cef3d416baf44448e8afb286b2fc2a07cd5e7", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "ec695f08-14ec-42bf-9a24-6dca52e85de0", "value": "T1D9935C42B70C0B43E0575DF03A3F57E1C3AA66A120F8FA89790EDA4596B2E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "4870a109-9027-4d25-a794-c35fdcd0c6cd", "value": "1536:6hSlTzh8nuVu2NMq1B+z6Xls0kyb6d6TXNfGwT1nmIKGMX0l1WrFlfTAOFlZ:LKq1B5TXhGyKGMKWr39Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "0c413842-1b72-4b71-a492-1a2c77702fb3", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "7b2a6f40-2517-4aaa-8ffc-7de52eae9796", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93081922-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "57f77b66-e933-46e2-bd30-cf831afd1dda", "comment": "Malware payload (Mirai)", "value": "9837f5cc883b09014a5094f079cd497f", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "241aa2e8-6cef-418d-ae4f-06fe4159149b", "comment": "Malware payload (Mirai)", "value": "ef6a8cef23056da7bc68c5337a291d6427a66edaf3a4561e6d0ae798bf458c64", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "2e819f82-1e58-4fc1-bef3-e4b2bde6ea93", "value": "T1EB933952FD818662C6C126B7FB5E028D376613A9E2EE3203EC256F2133C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "3c7f3090-3754-4394-bbd9-232f0f13320e", "value": "1536:Gd46YWRpzEaVstYJlWtjlItx2Bq79bwFJc7Bf9h+eJCQsiEzjJ:Gd46Y6pzEaZeS2BY94c7kCCQlk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "e77bba28-4e67-4a20-a367-6029687c8b6a", "value": 89852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "87c32e8b-5bef-41d5-a5cc-9ddd12848e0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931b0095-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "d6f66ccb-0cbf-4f24-8217-c58faac41c55", "comment": "Malware payload (Mirai)", "value": "86ffab0e015e29077f162787b7d3f408", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "c950ba26-049e-4d52-a465-af0e98c2c148", "comment": "Malware payload (Mirai)", "value": "f590872fa139fcb92eafbe13fadbcb5362d5e59420586f35d0d3cf6609f5efff", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "a3c30f06-da0a-4801-a4c8-8e773fc4a590", "value": "T1548328C2BA4BC0F5D90748304067F33FCB32D6394061D66EEFAA9E65DE7364252262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "31a36f88-a420-484c-af63-d0300447533a", "value": "1536:8l8IhK59kLMSbHh7znWAcanWC8f4TxdgoXF6hKql9:8/hU9ktbpnWnfgTxddXcl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "0c6ddc64-1e4b-4afb-b88e-36a0f4fad5d3", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "c2f5e996-a21f-43f8-9b88-5dcc15669c61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9322673e-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "9e040e83-c8f3-4668-bb02-c755529911f5", "comment": "Malware payload (Mirai)", "value": "99b03d81af5af050cbfc0723eac38359", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "775f09d3-447d-462e-b008-04e7685329a5", "comment": "Malware payload (Mirai)", "value": "5a11d08ab62f97ead0f6a5137563e71dd60955a8b1968854c3845448eb282e29", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "782069a6-5f89-4961-84d9-3ce384012eef", "value": "T18D932852FD814622C6D116B7FB5E028E372713A8E2EE72039C155F2137CB96B0EBB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "04e7e406-c748-4abf-b1a9-24726cf18b26", "value": "1536:EFdsDRtW3FiCVvEwJUIPdAcFj94BVVLAMCWPr1o/T7vX+oTJ:EFdYc3FiYDdAcV2TVL7p4TTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "03ce4cc8-9ff5-45d1-b21b-e9f87440b8c5", "value": 93364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "17401652-e194-4acf-a30d-ceb09bc21dcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "930e5a88-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "9306d00f-4efd-4a33-beac-cc68f3477004", "comment": "Malware payload (Mirai)", "value": "d94ff792bb63bcf5e7b881e6d18c885b", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "b9340314-7566-4fe5-ac4b-7a5182f1c362", "comment": "Malware payload (Mirai)", "value": "255d5d2364463b66f6682e0062273376bfd53edb192547c68466f47565da19eb", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "dbbbf0a7-6a82-4da0-b7d2-d578ad26c2b1", "value": "T1F9C3AEC3FA8714A1C46206F103C71BAD6F93A221CE5FE4E7AC1DB63B5A7A4DB15163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "1cd83d48-ca9f-4853-83c8-6194a08dd7a0", "value": "1536:qrMjtT/2h9gqbLjVfAXEAlWuoPVkfFELl5gx1chxs55xgRCE3/LWG:qrWT/i9kXEqn+CFELwx1cMgdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "f7628ff0-43b4-4e3e-add5-ab784ff5136c", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "7f537590-f9fc-411f-b6e4-7bc82a26424c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934c0e3f-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "9923a398-50ea-4fbe-af97-3656ad5e0bbd", "comment": "Malware payload (Mirai)", "value": "07366fb8583444911b80898c46a45703", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "13e0250d-d344-4c86-a7c4-20871a2956b4", "comment": "Malware payload (Mirai)", "value": "d4508bda632b5eb652735bdeddd6e444d69659baf3051e8121bceed0a1765835", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "326a25d2-3858-45d4-8af2-dbe9ccd9467e", "value": "T180936C85FB83E1F4D94609B011ABF7798A31DD322024DD6BEB98FE72BC31612911A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "5c2a480f-e544-4b96-949e-b60793a5bd23", "value": "1536:hqj89KwF8ROXbDzcj02/1Hj82aRqoqRpUQ31QUHLKVyMyFnr:64F8ROL/cj02/1HYdUuiE5yZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375890, "uuid": "e9c9f535-4ed2-4793-9482-e38545f6fded", "value": 95476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375890, "uuid": "20bf1599-0867-41e5-be14-8e2dc33c4672", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e540adf3-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375894, "uuid": "8d58238a-6cea-43e2-ab9d-3dc12ebd4374", "comment": "Malware payload (Mirai)", "value": "ac01de7aba718d330fb1e6288d556dc4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375894, "uuid": "f4e2d8bc-8638-4076-b18c-8a0490251208", "comment": "Malware payload (Mirai)", "value": "fe670335a7b4191791ed95670f5e1fa40560169d5872d8b88d82f09ec9f9d5f1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375894, "uuid": "4e1c6d78-2ace-42d1-aa0b-ff34f32289d3", "value": "T1B7134AC9AA03C0F1EC1112F510775B519F72A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375894, "uuid": "2140971d-e1a8-4afc-be0e-f095b6c20a9e", "value": "768:x73jOIDzzrq7WiEu+R2UjaZEx63Sxoa9d7yvEdjpKMxn:FjOAzwvEub4aZEg0FWIdKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375894, "uuid": "122fe587-e2b9-45bc-9410-f439b6136c8e", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375894, "uuid": "6055e3bc-7d05-44a7-a05c-9b3590620808", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59ab52c2-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375894, "uuid": "86c90478-4288-4925-b0ee-38ebf19e131a", "comment": "Malware payload (Mirai)", "value": "f2b0506fedcae2619898f290aec25799", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375894, "uuid": "26a2398d-5864-4f0c-898f-cb751f1fffeb", "comment": "Malware payload (Mirai)", "value": "ec040c8e8cab2c8abad575087adad8dec83af1e7e6e01339669746c51d4bc5af", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375894, "uuid": "ee54596b-50f4-4cf2-80ea-fb22828174d8", "value": "T1BCE30A46F8814B12D5C111BAFE1E528E37131BB8E2DF72029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375894, "uuid": "57254f25-0561-4da0-af06-07d0402687cb", "value": "3072:yneaYC/2Uau4JQXkDHTz9ai5oudNV0/4fLl:KevC/2NBQXeHTpaVC0/4fLl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375894, "uuid": "94b3aecd-8988-4f3f-b082-e6b9ef2ee60f", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375894, "uuid": "f0cd1cc2-1ea9-4c9b-a30a-321e84d52507", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4febe28f-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375895, "uuid": "a03a0a5b-5b9e-4979-9132-ecdfb5c04d37", "comment": "Malware payload (Mirai)", "value": "18179d2ffcde231bad3fccd23cc50398", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375895, "uuid": "abc2bb3a-35ea-43b3-b59c-ebee077a2bf1", "comment": "Malware payload (Mirai)", "value": "78f9b41b23be67bfbac32986c82f81e6f114b6e5d95439d65666514da324301c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375895, "uuid": "2a8e3f90-c379-48aa-b695-4e6cf4eab201", "value": "T17FE32AC7F900DEFAF80AE33748570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375895, "uuid": "04eb2e4a-240c-4f93-af24-0c7187c5afef", "value": "3072:SmzTDH86Jh78v+DBdjAj8GidMyQ9g4VvjbicLNPgym+Ygj:S2TDH86JRXjAj83dq9gMLqymxgj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375895, "uuid": "615e81d8-f197-4b6e-92f6-2c26d8212614", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375895, "uuid": "d0ccbb26-4920-4a64-8872-dbbe8b4aca7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "836ff4bb-2e11-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "e355fa42-96e6-45a0-8f61-0530af26758e", "comment": "Malware payload (Mirai)", "value": "0a62b1440fdfdd722729939fb8ccc16a", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "bc804198-836e-4172-820e-2edbed765ab5", "comment": "Malware payload (Mirai)", "value": "d968cc965bf4e5737413f4d730dbaac7b27ad8fb30beb182bcf6ed9af8811ff3", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "10d46233-9f80-4669-b037-be42684e2626", "value": "T12AD22B0AB901452ED9C614BD601BDFA99FA563C1B283160B1BF8FE933C7322A7F11D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "b452d883-6c0e-4c7b-92f0-99bf69e5a726", "value": "384:0bksdWGKXtIbWUxRFBgqai3UGrfFoqIoodvO8u/3hO1Gau4p:0bZu7yba2rtfUEvhO1GauI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "3b695c54-0314-4bcd-a20a-94355aa621fb", "value": 30576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "01f9dd41-78e6-4258-a335-6c59c01ab029", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9348944e-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "2245d330-a239-4862-9c74-fa71b5cb0239", "comment": "Malware payload (Mirai)", "value": "27eae7f5f1a3ba47a20495e314b07178", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "428e1d54-b901-4760-9b4c-0a46f43e0a8c", "comment": "Malware payload (Mirai)", "value": "867f65c80da50d56351e70941935ba9eace1550ab862d7b16817e701446b1c40", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "0b1c4b65-4fcf-4ee7-a155-8de9f15153ff", "value": "T158433D96FC924569C7C117BA771A978A336263A9C2CF7313CC0C0B5176C9A4F4E6BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "818ac3de-3dc2-4cd6-a874-ffa2fe0fd4b5", "value": "768:cZVgcik7nohvan+Ybl8dGsf/eMZr5Ir9JKZ6n43767oM72F30nIz3:cZVgcikav67ekgecNIr9JKZ63o0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "5804cc9c-3fe3-4d3e-ab47-eaacdf779b79", "value": 55344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "b1f389d1-375a-43dd-aa99-feca358eb084", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "812799c9-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "495ce1df-6b02-48cb-aa2b-a510bf36fbdf", "comment": "Malware payload (Mirai)", "value": "324ee226cfbb2c5e7472fb03548b8ba5", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "92ed694c-4a96-4c33-8f96-c912e2461697", "comment": "Malware payload (Mirai)", "value": "4a2ff2a16d6e3d0a523e1bc5492aa26b97cdacd3e8e9dbf1b5e1def47178b8ff", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "f601fa91-2ada-497b-bfae-2dc9379b939d", "value": "T1CB13D80EAA058FBDFB59873486F78E169A6833E217C1C542E07CE9505D6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "c5b794c9-649c-48c5-b7ad-c0407446aefe", "value": "768:fI3lh+K87Af9QbD19XDKj+3GyU4/h9dO0w7tJo:g3lhg7YQbW4FO170", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "86dc9c27-13ee-494b-9cb0-9ce75e2ef128", "value": 43812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "ee03f64d-40a8-4ef1-bda0-02d09d99f150", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93476ec1-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "6623a6ac-81b7-4512-aa1c-a730d0b291ee", "comment": "Malware payload (Mirai)", "value": "964af313c2b05d19abbff4996c02866a", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "fa55075c-6a67-4f8f-b013-dc4ab0660ca1", "comment": "Malware payload (Mirai)", "value": "96287c6c40b8806dce675dc2d1773ddccbdd9e6709374bd6e48f4b9fe2ed0b27", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "e329ad14-9484-40c2-8559-1a8501a763ca", "value": "T1F3935D02B70C0E43D1675DF02A3F27D1D3EEA5E121F4FA88691F9A8591B2E325586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "65f7a456-08a6-4804-91a4-63f715835c6d", "value": "1536:pcBZli/TwLrLXyUiQI0tdpDjnPqGD0M39+KBAnKE0BJWtMGXyC/T0QLlfB15:2Li/T+hPbTpAnWiMNC9d5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "f981539a-d119-49af-a6a7-a3daaa1300af", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "9fdf35a3-3c2e-4055-9e63-acf20cdfd371", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33e930bf-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "51a699f8-4d4a-4735-bd08-05b29f87682d", "comment": "Malware payload (Mirai)", "value": "d7668a5629192c25d5757717481794c0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "f536d929-7d69-44ac-904a-571a700f3222", "comment": "Malware payload (Mirai)", "value": "9740bdbd19b284078e285ffbce8112ab6b5b9142ad9e59f761cc47a43070b34d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "1533dc3b-4290-4f65-bbe1-f3aa89c768e2", "value": "T1FDA349D7B402CDBDF84ADBBB44530906B130E3A20A831F36625BB957F8761985937F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "dff08e68-fbd5-492e-b36b-9b63e3ee3902", "value": "1536:/dLg4OknwuynMJZTcafeG9MQ/4uOoWoL88U3qHDwSnJ35dNi6KjTrB9vidkK6Vqk:S4OMDTc87HOoWoLzL35HiZvidkLEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "3531e4a5-3fe2-46e9-9e44-022726eb1df4", "value": 99592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "dad490a9-6786-4585-abc5-822a3f5dda87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "340a1d74-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "1f620d44-befa-4248-9a50-a03a45c450d3", "comment": "Malware payload (Mirai)", "value": "f802151a81b4d9041efca4760146b4bc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "519f8ab5-2938-447f-b78b-ec1174fcf24f", "comment": "Malware payload (Mirai)", "value": "2f9a7fe5065b5afbd1f2037820937a791fbf3e3d214bc258ea3d4faafc4ea094", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "504dc995-0baf-4b4e-9b3a-b9c24658cd67", "value": "T1CCC3F909EB614FFBE86FCD3746E90B0529CC551712A83B7A3574D828F64B64B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "c2f01ae0-c42f-463d-8f63-0fdd9072be78", "value": "1536:DbARPjwIx5ptMn+g6z3jLVKQyRXoY6IyPOTMYvJZhed3yZLZZWqPHYmYFipM3BKR:HARPjwEW6T14Id3CLKGSA5L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "1b4ea370-05ee-4461-8184-770717020d4f", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "6f9c0a05-2c5e-4590-b1c1-9a301cfb29d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d011dc9-c2d3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "c1eab07d-0be8-4cd5-9575-1dcee7d6b34c", "comment": "Malware payload (Mirai)", "value": "9fbcd65b497d744cd6f29db53fea8941", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "7c29fcd6-f486-40a9-a129-b2077d5511da", "comment": "Malware payload (Mirai)", "value": "44bf84b0338e2e25f9c26d3cc1ddbf8f64758b66b4237c328dc96f8ad8e0751d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "9f7fc129-887c-4e04-bfd3-2d7c70a586f4", "value": "T13BD34B07B5C180FDC4DAC1744B9BF53AED32B1A91238B26B27D4AE232E59E305F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "ea711934-dd22-4f2f-86d5-7bb3a9819d48", "value": "3072:09/SOyAEvjt6qkWYoR6sjafoH0FdBugQyDueMEPGF6paD:09/SOyAEvjt6qkWYJ18tqpa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "fd7c0e90-cde7-4d61-b900-65146582f32b", "value": 139768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "857e75b1-4fd3-4553-9435-ec5b63331b2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5526f590-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "0993f2bf-1b9a-4e7b-a79b-14da399f7948", "comment": "Malware payload (Mirai)", "value": "533365ceccfaffd829299e0bb30e789d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "2168ad50-cfca-4fd6-9a90-4eb71e92c06c", "comment": "Malware payload (Mirai)", "value": "f11f911c9e7c4a174f7c6fdf841df7bb84090130d34616cf7c41b7c4e7d1aa3d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "44d52ef0-6045-4455-8b4a-3bbef0b1b246", "value": "T136B35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "cdc1afe1-f2e3-4a9f-bf51-17d4ccd6c558", "value": "1536:WTW/VCxsHZusk2Li62C8XiKTRpP/PVmAVoWWczTW+A1P7q:WytCxskx62N1TbVmFWWMTbWu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375896, "uuid": "62d9197f-1482-4d4a-a916-47870879197d", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375896, "uuid": "55196fa9-e30f-4a86-a0bd-42eef587b991", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93479ce2-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "387d9507-c1d2-44b5-98fb-da5c9a6267f2", "comment": "Malware payload (Mirai)", "value": "446af28456c7b21fa1e5716c02e73178", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "559df624-b619-4157-b08b-b52f4d0cd71d", "comment": "Malware payload (Mirai)", "value": "c9b26587fce571edf1f08903ac33ff8551778002272a95d85aeab28f3cd849b6", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "56c210d0-ce89-4e6f-87b4-668fc74d7229", "value": "T17D332912997C1A2BC4D0A77710A38363E2F72B954194EA4FBD750D4FEE983501ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "9f33e26f-85e0-4cc7-87ca-3f970203249c", "value": "1536:4b34LHJRwGYtJLx1TBH4EmgSXUwXyqVNS:4LaQqUj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "e2ad6b4a-6971-41bd-a8ac-874fd0f5db30", "value": 53812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "c17faf40-fbc6-4dea-ad92-66fbdb8d50d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "551be86c-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "c2fd4128-706c-411f-9d61-8aed470241a5", "comment": "Malware payload (Mirai)", "value": "d4c04ecd48914582683af9cd63e749a3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "fe9b514f-3c3b-4105-9e48-a2480b0cecec", "comment": "Malware payload (Mirai)", "value": "4a5b7158a79acf6ce97709f56ad49e6613bdc6ba7d30ee11f2cfe1c7af3a6ee9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "e03233fc-82b7-421b-aa6d-215123898538", "value": "T13604881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "a503968e-64f4-4d0f-afb6-50314b364a51", "value": "3072:jg57RO7LHZwbq1YSBan1yvbysxr1uGSjI:jglRO7LHZ0Bqyy1BSjI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "2a377255-34c7-44bb-8424-f44f46ed0cf1", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "51974d89-0862-476d-a375-7643662e655f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5015c1bb-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "0b45067c-4203-421f-8f1a-91d2eaa46da5", "comment": "Malware payload (Mirai)", "value": "5e6b58ad8d795eb326dbca54ee8a8d5e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "87435bbb-d892-4ff4-83b5-2bd1fae2a8df", "comment": "Malware payload (Mirai)", "value": "4d53b659a8eb0c6dcc12e26278c92ff20727ed08e89c4c49459063cfdce2eb9e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "6e073cf4-6744-4098-b50b-b7766d433322", "value": "T109D32A06730C0A47D2632EB03A3F67E193AF9AC121E4F640355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "fd85d81d-d526-4521-866e-1c05ad99b8ea", "value": "1536:troGHNTUZNG5IBUiCxfytKteQQvhDajwso7lbEJvAhh3rp+JuQfqAE87vnJ:3m9UiCxRteKwF7lLhrMznJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "0036d4fa-67aa-49b3-b3ec-ab1b1efc71cf", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "065fc930-7f89-47b0-b2da-e504f15391ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ea33ac-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "632d0833-a565-45fd-a128-6cc4283405d5", "comment": "Malware payload (Mirai)", "value": "656015a9cf53a9fc43e3c78a00aa8cfb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "56acc3e8-eed3-443a-9eaa-da3fc7467a7f", "comment": "Malware payload (Mirai)", "value": "a5d69d5e5a85a7248ff3556b01cf53034f21fbe53efb8188481e27eb6982c9fb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "63b91b6d-7fbf-4d04-8b40-ce01c220363b", "value": "T152333902A9BC1A2BC4E0A77711A74372F1EA1B954194E64FBD320C4FEF593501ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "63557ee4-7284-40f0-8db7-20c3cc9029da", "value": "768:mxPjOo6L9W6Wn78hhOtCuJb17IaPXGaSxBNOAcz8FZzVFGMIZQTPuU:wjOPLRW76h+CuJb17B/GaSnYFz8bbUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "6dc6aa85-0b65-4450-93dd-4ba3baa7938e", "value": 53556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "98d17de8-077d-403b-a917-8571d37d04c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35f30044-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "ac8525e6-9c9c-496d-b7af-2d4672094fac", "comment": "Malware payload (Mirai)", "value": "70b1b5f58034db11e0fa513af68f7062", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "f5f87173-f986-4d64-b801-40eb4498379c", "comment": "Malware payload (Mirai)", "value": "b1bdfaf754e013b6dfbc4b16b667ebd6b22ee07d4b3aa530d9bf4ae7859bcc3d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "4388e0c9-079c-4990-bdc5-2c693f8522e5", "value": "T10C8337C2BA4BC4F5D90748308067F33FDB32E6394061D65EEF5ADE69DE7360256262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "597b088e-327b-4fcd-9b54-b68ad137fa10", "value": "1536:AsUqLC093vmVkYBbLi8HmWAcDMWiAcHDGLgoha9hn+:dUqLB93v7YhHHmWtfuDGLdhR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "b4215b5f-c3b7-4c7c-ad4a-50ade13bb357", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "b1056d8f-2fa9-4ef1-b08c-afb54dab7fab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35f9aca7-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "15cd8992-ea03-4667-8ecd-7dacd80855bd", "comment": "Malware payload (Mirai)", "value": "04339b8a19aee6e767b7335795673db0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "69ea3fb0-ce4c-4ac5-80e5-04954d3ccc95", "comment": "Malware payload (Mirai)", "value": "3e048e2af7015fdaf28ba17b0708d7b90987b590c81fc1ed43f7fa280f0972cf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "dd5f3625-77a5-4aa0-a96f-dc368ee6599a", "value": "T120736CC6A783D0F4E8674572217BF7314633E53E1069EA83C769A932ED13541EA2A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "8faaddfc-57cd-4adb-945e-7e9c50807161", "value": "1536:9ax2LeuRS0GihvGrqCBPJV7/yjU3A9vG4NKThsIsG/PS:9agLeDQh+rqCBPr/yjU3AJG4wtbFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "493be4a7-7e9d-4b04-846e-699a302a6559", "value": 80688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "601246ce-7f68-4777-8c56-d459f3946070", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35fba2c5-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "36721d6c-092f-46b4-82c9-9a9648e546f9", "comment": "Malware payload (Mirai)", "value": "9ccdd6054877c59a55301924adf918e3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "0338f6eb-e146-476c-bb30-e6d079f18567", "comment": "Malware payload (Mirai)", "value": "c65b5482651c79b1a4b6d0e965042f59c59d3948cbca62a5fd7506b77ae98440", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "e42d498a-5c76-460f-b6d7-0a10959ad9dd", "value": "T1EA935D52B70C0A43E1571DF02A3F17D1C3AA66E120E8FA897A0EDE4996B2D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "515e499b-961a-4a59-a04a-9fae964251fd", "value": "1536:p47fmF4w9uitC22zR9UHrhFr0R3GBtCTG6vC7fJH/wGSMe0l1WrqV4COFkJF:ouhCTGmCuGSMnWryHF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "28ff417d-2519-436d-bc85-c2d8eee321e1", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "dda6c74d-345b-4894-b79a-63b139edacdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35fbd586-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "5459fb9f-4780-418e-99bd-da538afd984f", "comment": "Malware payload (Mirai)", "value": "4fd39ed4c694ba8751fb803aff066bda", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "f3f9cfb5-6c42-45d4-a7fb-403fbe67d65d", "comment": "Malware payload (Mirai)", "value": "478611152058dc4fcb0f7a5e019b27351030eae1d6a24beff36f0ec2db7f9b8e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "e03e8ea1-8b1c-4cfc-9e24-8d722f7334aa", "value": "T142433C92F89245AAC6D117B6771A978A33A267A9C2CF7313CC080B5077C974F4E77B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "8d2ce569-35a5-45f5-960e-1e4966db0fe0", "value": "768:CuoWscL7J6liNNPrso8dqmFYEPhZaqTtsXrdPK8/4Q87MT2Fk0nEzic:cBcLeijYPocPLSXrdPK8ckd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "0b13389c-7e85-4c33-aa47-d5130d85b117", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "f28e5aa1-a394-435e-972d-5f25d84016dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35fe9473-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "6200bb3e-44c3-4a13-8003-bb13b30bd93b", "comment": "Malware payload (Mirai)", "value": "d72a639ac7e19ddfe8e7376b9f79ef10", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "347b9f63-43f6-471f-811c-ddb72b84e779", "comment": "Malware payload (Mirai)", "value": "c2148b6cd0ad6dc701bd4c7787e4c5771061a7006b4a38e0c3e7486f8360face", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "604d33c2-6fd9-40d4-a8bf-53adf1a3d4f1", "value": "T1DA839C23C93A1E68D84844B0B0A08FB557A3E215C5572EF7595ACA3E9083EDCF6863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "cb079ab6-0e82-460d-9f28-61c27d5b06fa", "value": "1536:onxqxK8a8bNOdCmkkC1CK9dz0LU8U9CGVdwmHyzoF:oxqx5EdbZCHfd8U9v6toF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "50e015f4-598c-4b10-9df8-0935ebc0f6c6", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "7d9e16e8-b4e4-44e0-b507-c906f9990012", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ff7ef8-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "0678972c-945b-4a43-b0cf-37edd1cf4a19", "comment": "Malware payload (Mirai)", "value": "19e9c69d3da177df8fc428db287844f5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "fe4e188c-c2f9-4370-95c0-02c8d3790ad2", "comment": "Malware payload (Mirai)", "value": "1c9f23290946d42402cdbe81a7b47aba7e1219a3748f80b73814e8770633f1dc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "57b3bb40-a57c-44d0-8855-6ff156c9dfb9", "value": "T1E0935C42B30C0E43D1675DF02A3F27D1D3EEA6E021F4FA88691F9A4591B2E365586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "5d99b962-1971-4ce2-8b89-39cb39134558", "value": "1536:U5BEhAsKkfqTXorWz3giV+7p1sf7Hj1wl90tG0t3BA/K4ye8HtM2XyCADbZzxYlr:ULDnIqTzzTJCKfA/sNM9C4+1X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "b5621f24-73ed-4599-a82a-ec956d229edf", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "77628517-df42-4960-a92c-1170255960e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3603df5a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "ddc30665-d346-4ff6-aa01-b3deeedefada", "comment": "Malware payload (Mirai)", "value": "af6e5d711a73f3fa08f8c3f62e0074b9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "ca135f3d-fd2f-4d5d-82ef-1ab58040a9d5", "comment": "Malware payload (Mirai)", "value": "f92effb9deef1186db7860270e6b5ad7caf147fa996ae1458584f6d0a5a49689", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "5b43febc-f0fb-4192-a6fa-776219a82aee", "value": "T1D1C3ADC7FA8714A1C86206F003C70BAD6F93A112CF5FE4E7AD1DA53B5A7A0DA19167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "f8f30056-fa43-4ec6-b338-f01d93128c38", "value": "1536:/PcakPsaaavKaSMvcmqSmHzQQsWdoPzKAffllUjCcTxs5JtgFSmEv/LWE:XQsQvKqNqzQnA+WAff4jCc6g8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375899, "uuid": "b44f21c0-d369-451c-b668-4e87df756e94", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375899, "uuid": "e0bb0b02-2108-4b90-9f18-4cc47effae68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "806c4c43-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375901, "uuid": "49848696-6043-4b87-8be0-9edacb2ea56c", "comment": "Malware payload (Mirai)", "value": "eefa0ffb201f49bec627b70117f57a7f", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375901, "uuid": "c0185c73-b929-48f1-9946-acb25220f6de", "comment": "Malware payload (Mirai)", "value": "0e8014c37974401c21e48e03396e2587a3107de2cf1822eaec043cdbb00d42ec", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375901, "uuid": "39b93fee-6c1c-4293-a29b-dfd955e6ae0c", "value": "T16A13D806BB110FF7E88ACC37459E6705189E648862D4BF37BA38D8A4B64735E18F3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375901, "uuid": "7e611a62-79a9-4fed-ad5f-5363c8e96b97", "value": "384:UO+/DFQNLv7UsB5ffNd30o88l3DiE+u0l3DYZLxO9cZ/hySF7godFGPFBnmvoPVr:UO+/aNLvD02/L7giMhOz47JvvWaw7F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375901, "uuid": "bc99a3e9-1b24-4a8f-9f6a-156fafcda9a2", "value": 45112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375901, "uuid": "538c98f1-6af4-4051-9af3-1c225f162b6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931994bb-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "e420db46-549d-4dc1-a57b-7dff6012719e", "comment": "Malware payload (Mirai)", "value": "8a099fbeb4eaf46336123841999b47f8", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "6e3a8e1e-36fc-4b55-8222-e2ffee67d610", "comment": "Malware payload (Mirai)", "value": "58f1158fc19f60eb48009af7a9398042ad8a61f091a84fea72ffa0ed28e5968d", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "0e55f759-eb93-4679-9eb3-7c9bc2bf75ed", "value": "T199839B23C9361DA8D84804B0B0B48F755BA3E515C4672EF7599AC63AD483EDCF6863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "43da3581-8339-4df8-9a2d-c0ab6b778d94", "value": "1536:axD+xE86+GZal4XhbFKxvCgF+HRCaWl5WQHyn:al+xsZ8q1Mxz+HRE4n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375903, "uuid": "7b2f0e98-1637-4ec9-8618-53bb05d80bcf", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "d27d0e67-0f6d-4d4e-83f1-73ea2df3c54a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e2491b6-2e19-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "05bb58f7-243e-4f66-b869-1dea60ed1d1d", "comment": "Malware payload (Mirai)", "value": "627d9d8e225edd9a5c0c9ca766139d22", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "7615cef8-7c79-4fd3-8332-40e9c50d806e", "comment": "Malware payload (Mirai)", "value": "31bbaf8e9b18430b56dfc9b8a10f9b5427f012db15ace92b4381b82513efb68d", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "a05ad556-8a00-4888-bac5-b3c33dfc515c", "value": "T1A7F2F890B9420A27C5D5227AB76E5BCD37B067E9D2CFB303D8205B757A85A0B0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "ee5682d9-a244-4e44-b7f2-17d7ed518f82", "value": "768:jHnryfqG8moTeb0hcLFSx0BxmjqdIYy6y4gbAw7:jHn/PNTeycLZxWIIYy647", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375903, "uuid": "290ff123-873e-4446-8867-b0abd88ea9ee", "value": 34564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "9cee775b-3604-4eb6-8bf3-54a5c3ab7a95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e7ec6d8-2e18-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "6e4a60d9-2951-40ac-93cc-a0c518bc13a6", "comment": "Malware payload (Mirai)", "value": "d435779e6ed05188b646b4822f433746", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "1edde63c-b112-4a02-bd3e-c236a9bce028", "comment": "Malware payload (Mirai)", "value": "661921358ddded1986e5b62293e3d6ff510fc603ebcec7a8d5ba3d3acd8f47ee", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "380042b3-1f57-48f6-96dd-05afd47c607c", "value": "T189F2F951B8928237C1D512B9B7AF5A8E377173E8D2CBB317D82107607B8161F4E62F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "3dcce820-8526-45a2-92ee-dd6643b2aedb", "value": "768:JhLEqGKX31qBHA0G5WyO1K/0d09/acgobNw7:vSKVCfG5Wyf8m9/acG7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375903, "uuid": "74a81073-162d-47ea-ac74-f2dc500ff320", "value": 35980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "e66d0de8-2794-467d-93c8-617ab1adac5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934bde60-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "4d97f8eb-c5d2-40ba-987e-32649ced1e55", "comment": "Malware payload (Mirai)", "value": "a15d6e6a5469cda7f9d5cba92a09207e", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "d089baef-7106-47ba-9bf8-a3a5fb70a405", "comment": "Malware payload (Mirai)", "value": "e79bce3e2cae2cea2a701e3eb11e8adcbe268173251dc4717ea2ff1e3affe737", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "889988a2-6974-432d-86c0-8a0efb9ba158", "value": "T146C3C74E6F218F7DF368863047B38B21A75933D626E1D685E2ACD6005F7034E245FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "4f4d48a9-61f4-4b2f-ab6b-4ecfd70b11f7", "value": "1536:o8cT1Lkgwe4eSZjkap6Ijj/Cr0ubgpa5KT4qLHR8hXVPe67c529tplSM:o31LPwvJkCPeS4qLHkXVh95F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375903, "uuid": "0cb52cbc-de58-4d8d-b9b7-86881475f3cc", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "3a528029-6732-4197-bc13-9c85b0dcf798", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93244e0f-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "805099b1-0608-4043-a861-0e0bd3ed4412", "comment": "Malware payload (Mirai)", "value": "9072e5be7fdd82aad6770a8db2efc312", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "6abac8be-b965-432a-bb66-772481294390", "comment": "Malware payload (Mirai)", "value": "f4d2cb8b8ff03d8a29cbfd94cf862b69a84cc9f62d0ea9fb57f925b86685c2ef", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "1a4a7d4e-96b0-4756-8df0-a07e08aff1a9", "value": "T1A9C3E909AB614FFBE86FCD3746E90B0529CC551722B83B7A3574D828F64B54B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "700a2088-29f1-4bd8-a06a-36ee502e71f1", "value": "1536:htJ6cGVoxBFf+g6z3jLH514RX6bP+Y0+YdW0OKhR6wppsWZ5uRrKnre2F1Volykt:TJ6cGVoJ6Tne/6wQWCZ72bWliUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375903, "uuid": "531347eb-0746-470a-8cfc-982b2cdd0148", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375903, "uuid": "5d72a989-1d38-4ba8-b708-88f8aa4aa1f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55de2ead-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "e84b9ae5-069d-4fb5-83f5-0b68d261a33a", "comment": "Malware payload (Mirai)", "value": "8da0e1433f08299677d858178b58c443", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "99f9309c-6f73-40d6-9d65-514b7e8b88d1", "comment": "Malware payload (Mirai)", "value": "e3e412f7afaed4073716b40d74c2989a7614684d3c37b05c4334d5f99186bd45", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "57e030b9-16e4-4e0d-b091-01e7fefacc46", "value": "T11DC31B45FC405B23C6C611BBFB5E428D3B2A17E9D3EE720399255F60378686B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "387ed415-0c26-451f-ae46-825832f145ba", "value": "1536:pXKa0rG5yC/cMChygtpOBdWFAcJX4VlgXTA70FoDUGBr7k51WhPV1lHFwywEReQF:pKaprMh7POXWFh4UX40FoDJBkvWR2Su", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375904, "uuid": "9bae1ee3-1dd2-4abb-b725-e79e4606a354", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "330011e7-e99b-41e7-9a94-9714832529e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3891d194-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "bb569b5e-3ee4-4c9d-a2ea-4acdc8e05532", "comment": "Malware payload (Mirai)", "value": "b82a3b075701b7b8f5a2eb8676fc1cac", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "3a5398f6-eb65-48d9-953f-8cae28663cea", "comment": "Malware payload (Mirai)", "value": "8e95b36f28ed2c72164706d969fc04dc4dcf140d13654341d74ea9e69416a824", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "91cdcd6c-60ad-4601-a70b-e798140658c1", "value": "T162C3C75E6E218F7DF368873047B38B25A35933D636E1D685E2ACD6045F6034E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "4507e657-2cbf-4cb1-b2cb-a16b1c336819", "value": "1536:0+AZvMfRae4eKmjkv99IcFloKr7uh5pa5AYkHQHZ/KMAqeR2qiE6ppf:yZvIRavIk1bHMEkHQHgMAQEuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375904, "uuid": "57ceb737-6ce4-486d-9164-1dd1eaaf1e05", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "4048cfe4-8120-4660-b348-de938358450e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3896c324-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "ffcf4b39-ef17-4d69-ba23-99d16081b52b", "comment": "Malware payload (Mirai)", "value": "799227c42a451b2b10d2017c5140b36d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "68f10539-5f2b-48fb-b837-b2625eafe159", "comment": "Malware payload (Mirai)", "value": "05c5d5b026e976b85bef06be507c1d39cfc737a2539d6a085892ac4f8b92cf9d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "0abdfde6-242a-423e-a8c5-7a04f5602107", "value": "T1DC937C89FB83E0F0D85605B011ABF7399A31DD371014DD6BEB98FE72AD32612A1167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "36a883a8-e084-4636-aadd-13c3f6993cf6", "value": "1536:N5aITYAehHb1Q7lpBbtrar81AFe8GG6/qoi489rUd31QgHLAVbCGzr:N53cAehHZQRpBbtrar81AFv2iWumK+G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375904, "uuid": "8719703a-edb1-44d9-b859-683c9bf23104", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "3b7da166-3fe1-4788-a8b4-22bbfe7fda63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80831532-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "ca841890-bf76-48c2-8cb0-199eaaf81831", "comment": "Malware payload (Mirai)", "value": "c14888670d249ebae909e7f76e28ab33", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "8a340b3c-109a-4505-9f8a-b8d71d1434d8", "comment": "Malware payload (Mirai)", "value": "2c5d22782f78bdb3485b731af0d86dd3293b7be959be1b964577fa0fecdcaecc", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "bfd02796-6c63-4ed0-9f76-11f729a50374", "value": "T1F2E2182BF0858695C083017094E74C361F17E5C18B585E7F6EE88592188BB6E7F27F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "0d3857e8-e208-488f-8aaf-4edadd9713fc", "value": "768:ZdKhKbT7ekuBYyBeh8moL4AQn4OICnw7:EK3Ra/LmoEAQ4jx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375904, "uuid": "6ebd9ddd-4c12-4aa1-9a90-a2a641c185dc", "value": 33116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375904, "uuid": "0ec25e75-34ca-45a5-bb2f-610d2c35bfab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e53605c5-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375905, "uuid": "9884eafc-a730-422a-9628-7ab9dd60d42c", "comment": "Malware payload (Mirai)", "value": "1e7b96e195f4f109bf1f14b468a67606", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375905, "uuid": "42830527-3aea-4946-babe-228aaa9459f7", "comment": "Malware payload (Mirai)", "value": "9f231e84ed3e25365ba6b42ef20deaa1321331954228b8928910a874b38f6296", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375905, "uuid": "2d4c5654-e9e8-4d89-aed8-399dd2804977", "value": "T191331AB51516F2ACE9E22038F40720F529530A1C3ADCE2D3B0934575FFB9B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375905, "uuid": "c31e18f3-fa35-4930-a212-090210f0e517", "value": "768:AKEClhMqB0yBuKw3GoACzQyZRt9kASxE6TlI0n1Oww41:AKd0vZ2oR9Dt9kXu2/L1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375905, "uuid": "373e6bb5-289f-4625-a856-93301cafaabe", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375905, "uuid": "fa7f942d-8073-48c3-864d-952f591a052b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ac55f85-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375907, "uuid": "cbb60285-8730-4c78-a73b-afb1e2de7ba4", "comment": "Malware payload (Mirai)", "value": "ebf9ac7b3540d1056cd4e5642e3055dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375907, "uuid": "52167b63-7c22-4763-9bcf-3d210d8d8c11", "comment": "Malware payload (Mirai)", "value": "81635455df829c7c5f7758d00b83ba875539f3fe344faf275bb64596f373c8d7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375907, "uuid": "42bc1ac6-7b48-44e2-a464-b740097f4b8f", "value": "T114933A52FD814622C6C516B7FB6E428E376713A9E2EE7203DC259F21338791B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375907, "uuid": "a603f42e-f8bd-4e26-8137-df9876e272e2", "value": "1536:JK4UrFTa22HNc65E6Mfee/2l9FB+oUVN95Jr1oAYPvdFu:JK4EFTa22twfee/WLkoUxpAK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375907, "uuid": "2fe5fce5-1ad6-4317-b01a-46f66b214c95", "value": 93092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375907, "uuid": "4d7231fa-47bc-49ca-83f9-66951fa94e8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935287e4-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375910, "uuid": "da045198-2b3e-409d-b8df-a7a550d66392", "comment": "Malware payload (Mirai)", "value": "63fb72e2d1cc5a147ceea0d35962fd4c", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375910, "uuid": "3f51c5f5-8532-4bd3-ad7a-aebcd3b62217", "comment": "Malware payload (Mirai)", "value": "207df8bd9aeb27d73e67f4219d8ac9694f81ab8440dbd9a2d8214a34a85a8e0c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375910, "uuid": "57b657a9-b0d2-443e-9b77-1665d6c5e565", "value": "T1BAA338D7B401DDBDF84EDA7B4053490AB130E3620A831F36626BB967FD351981927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375910, "uuid": "9fa8108b-233d-44e5-8e33-e4902db96198", "value": "1536:QszQ1QMf9sBikTlnCpONBjk4nwlHt6C8n3aH7IH6J3KSp56Kn7S1U4vqr4KXm:QZswkJnCpkW+wlHt6ad3KQ5Zcvqr4Am", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375910, "uuid": "30a614c7-dd09-4090-95e7-7cbe32afbd00", "value": 99852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375910, "uuid": "b4e3fa43-e0dd-4a54-a680-de011664b3a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "702a1d03-2e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "311a539b-6f50-4365-ab06-4bed9a3a9fba", "comment": "Malware payload (Mirai)", "value": "d8058368392690e3c7cec607eaaedebe", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "2ece8ace-920c-4b09-bdd9-4eb068ca736b", "comment": "Malware payload (Mirai)", "value": "7a1136c218ddf262cb29c1bffb4b7dcbd39c2c9f435bd42287d4c3ad3f2db7d8", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "00aea8dc-be3e-4742-8257-f5aa100597ec", "value": "T1EA13F954BAC1462BC5D52278A2AF5BED3720A3D5E2CBB303D5245FA47E8264F0E13F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "58ad1994-ab38-4425-a0da-78e279b3c1c7", "value": "768:ki+yEyHiG8mwTeb0pcLFSxshZ+DqdI2yty4obQw7BTEsHPeV2:kZycPVTeacLxZuII2ytQ7BT5HPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375911, "uuid": "b62b5694-bf67-407f-bae8-466a7cbc791f", "value": 43767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "f3f5c545-db08-49ec-a5c6-e7ae3d7defa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8084b8a1-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "6a7d76fc-0852-405b-9648-a813be022039", "comment": "Malware payload (Mirai)", "value": "27eaa461169cfb17d76dd38993534ac2", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "0ac9f41f-d503-43c3-8e93-39a689c5759c", "comment": "Malware payload (Mirai)", "value": "f2cab18500acd57996c05a68f74d08badcc9518d453d9d0ee1e3d8ae0ac3b345", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "8dbe3bad-65ce-46c8-bd7b-fffe04aea45c", "value": "T193937CC0F683C4F6E84305B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "37efa86d-a802-4323-bdec-68bd8fda9c7c", "value": "1536:W/QCZaxGdvts3i5JPhoTIxPu++ALtgUIKqI4FrS4LSc:WYCZa8dvm3oJPhWIxP5htSKfUmDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375911, "uuid": "3f270746-4f2b-4029-8c04-c42cefe9ada5", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "445963f1-d445-440e-95e1-768fd86f2868", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "503aa9b0-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "7c7a20ff-3901-47f5-b161-0154e49cf9df", "comment": "Malware payload (Mirai)", "value": "6c9911f5af1e9ffe3a261099c2659bb3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "209473c2-cd00-4716-b7c1-3f6cf7f3ba12", "comment": "Malware payload (Mirai)", "value": "5f2dd9916cea8a17649e90aa2686640fa215659e50cba4e7da8a4414e70a97b2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "4a8183b0-883d-4afa-8c2c-9de12adfccec", "value": "T14F04B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "01329d9e-a6fc-4bff-a05c-58df2121ae03", "value": "3072:nKpzGteNkSfcQqmav8SqaRVlnYz65xVt:nKYteNYQqmeqavlg65x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375911, "uuid": "400e8d39-977d-4a69-a37f-e8fd412d21c4", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "432b17fd-3f6b-425a-b3d2-7f5f18015f9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d2547e2-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "bec0b32d-4e3e-4dc6-afd9-673ca58256bf", "comment": "Malware payload (Mirai)", "value": "82755a82e88c2a95a770063d4f4c99f5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "c504a796-ba3f-4d25-a145-c87b834434ae", "comment": "Malware payload (Mirai)", "value": "e599ce2ef272b992a09f3dde023f40e3fc454eb24b225eb5786bf82ad97a6eee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "872d7d5e-3669-4478-994c-b67d670b3085", "value": "T170933A52FD818622C6C116B6FB6E028D376753A8E2EE3203DD255F2137CB91B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "17116eb1-1683-49ad-9888-45dfef15c0b4", "value": "1536:Vomg7Y5Ej9lt4Gjls0NgIy/xJzpn9awgJSSl9LKReJCQsxE0G9:Vor7Y5EjlSH/zl8jSSsCCQeY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375911, "uuid": "8c305efe-4520-496e-af15-41b6bc5cc594", "value": 89580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375911, "uuid": "e7d2a293-2e09-4081-9e9f-04209c4bd4b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82986c53-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "b1a0f0e1-6690-43ae-ab5e-b3e137375ebc", "comment": "Malware payload (Mirai)", "value": "508e0cbbe4d0aad404b3d096623b1e0b", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "a47d3055-8cce-496d-ac8e-e1ec0c0a4723", "comment": "Malware payload (Mirai)", "value": "3d3f8ae68fa34cb16982e818e0d53ea00303d26eeddc9322104c291790427e87", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375913, "uuid": "ba8b331f-aa11-48f1-8808-44ca477c0351", "value": "T1E7D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375913, "uuid": "3466dfe8-a3c3-4991-8985-c973967b1890", "value": "3072:79eSuygEPjt6qkWq6dKmDnYMb0gBd/gQyVGsdqml6Paj:79eSuygEPjt6qkWqpeH2laPa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375913, "uuid": "df55ab64-f563-465c-9e47-84ac461a592d", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375913, "uuid": "dbb53f1c-cce9-4993-a40a-4ea996f5a661", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a4d39a-a8d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "b3aaf20b-1af1-4da5-8e4e-3571e2460d9a", "comment": "Malware payload (Mirai)", "value": "bf3f29ef2474cf65a32ed0c907ef7eb7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "90528dcf-54a5-47f8-aeb1-ec594e9d072e", "comment": "Malware payload (Mirai)", "value": "bf9c8db8a1188929666a2af017f11f9b94ee679479a8d69706874a6e6f466c28", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375913, "uuid": "53149f7e-258c-4dee-98bc-b30ef09066df", "value": "T1B2D30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375913, "uuid": "0a7c8c0c-08ea-41b2-9813-4acec5e1cddd", "value": "1536:QKdzElm18uZJNb4AGFa8eAZHk4VB7fzTTnf5mgYivCyeqZ/Z20lCmwyw6RNPUTuR:QKp50ZU8e947L3f5mziPtRZ55ZKu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375913, "uuid": "32680516-3258-412b-8b2b-34188834102f", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375913, "uuid": "34367c8d-3afb-4cf4-9ee0-2d5fd57e1b0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8289cbb9-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375918, "uuid": "d5c8bccf-0fe3-41ac-bfad-d720261403d5", "comment": "Malware payload (Mirai)", "value": "0127028501f1a927b49c5c394f597af0", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375918, "uuid": "41468d4f-80f1-4c98-a7ae-e31e5466d250", "comment": "Malware payload (Mirai)", "value": "b6e50222ea2cecfbafccd6ec4208cc444f82db9d4dadaed6e5cb7302a690cb62", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375918, "uuid": "21a0c09f-0c21-4661-8480-bf52e809bd4b", "value": "T1C1F218127ABA1B17C0D2293920AB5F9236651BC963C4D64FBE72095FBDB23002D17E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375918, "uuid": "2fadd244-98cd-4c44-8c0f-6560fd34efc3", "value": "384:+WUJJlBEiH2xWFnMRV3pWbDENXTebve/ZLZZgRqHd0S3knTtXhkFPwF2U:+WfyFFneTxVT11ZZcqHd1UnVhkFPwFj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375918, "uuid": "e1eac29b-d30c-46da-82ba-fa384363501c", "value": 34860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375918, "uuid": "6b5521a4-bf10-4f7d-89ce-946b2a8735f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52f64d06-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775375948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375948, "uuid": "7559f583-0019-4df1-8ae8-0ac33757b134", "comment": "Malware payload", "value": "986120c2af6c5eeb1b291b6d6cbf5d6b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375948, "uuid": "97227f7d-2097-49f2-9e4e-0764255819f9", "comment": "Malware payload", "value": "f2ad2df9d91f781b325a2e4dc68aed588bbebdac0d76fd89db3c787c44084960", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375948, "uuid": "c7e2e165-d127-4c24-bb58-850c26362826", "value": "T156E026C0F0A0EBE384420CD3F0A0540700E3FE891B690F9486CC38F7081ED0970E3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375948, "uuid": "f930c7e5-7db4-4fb5-a3c6-fd9f5939ecbf", "value": "6:ebw73w5/KDyPIacVHC6QZrKpKaOXQZrK48a6e/L4p5:3WKDyPIacxQZrKwtAZrKGrLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375948, "uuid": "7ecb5d30-f6c4-4e27-8b12-cac96ae4a990", "value": 336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375948, "uuid": "8824b170-735c-4532-ad75-d795f13f9b61", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "530c659a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775375948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375948, "uuid": "caa37acc-9f22-40b5-9f49-4364e7f97870", "comment": "Malware payload", "value": "628286207df9768cecda6b980b2fd682", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375948, "uuid": "2ccb1319-d0a4-437b-a0c9-205fe7b23cfc", "comment": "Malware payload", "value": "3baaac814ab283c951b35d3f13d518e694627cd99c49e405003262140aa44ce4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375948, "uuid": "cfe9604d-f5c5-4cee-8f80-4fffa0ae72c6", "value": "T19FE0C2CE3820A356C424DD147073CA2F6003E2C862A9EB6DF84E05AA8C98508F23CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375948, "uuid": "1a82d596-33ca-4976-9ac6-407de8a76df0", "value": "6:L0Gjb8eFa0LKiVaMFbsCUoXbgItBHXbRJYU:gGjbE0LKAbbbP7HXbRJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375948, "uuid": "311adda1-ce2c-4d00-8d82-a4c5e5708ac0", "value": 297, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375948, "uuid": "85b7b4a3-1b26-4e51-8c2f-e009c2dc29c7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19183cb3-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775375952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375952, "uuid": "036b0c73-12b6-44e2-be22-e78297e90b2d", "comment": "Malware payload (Mirai)", "value": "0f521e057ba61ae49329db721446ae5a", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375952, "uuid": "98010227-f910-40c4-9dc6-87c3192e8acf", "comment": "Malware payload (Mirai)", "value": "65d10ce7d4cbda9b316b4a4e1d82e0cd111f741b8aa2cf595fd9183de6364a34", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375952, "uuid": "7949ade7-b121-4f7f-8d21-3368b122c137", "value": "T1FC01B1CC3134247075B6D8E65E32AD1831C990963DC63DB878E6B0EA85F5D10B98A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375952, "uuid": "f8b35dd2-621a-4bbd-a876-e00ab5a0cf36", "value": "12:YkF1kcClZF70SAaHFKaHFTaHFWjLSFSrLR+FM5gFiLTjLSFSVLR+FMDgFiLXA1Ld:ZDkH/FbzHFFHFGHFWjOF6EFM5gFiPjON", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375952, "uuid": "7d47468f-338f-4efe-824c-ce41ac7975d6", "value": 744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375952, "uuid": "bc0c36cf-ce5c-43ea-964b-73784ee54d36", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20031a2b-30d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775381875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775381875, "uuid": "83703fb2-d676-4e32-b2fb-e2caa4fedc0d", "comment": "Malware payload (Mirai)", "value": "3c1640eee79afdf0c5412127ca7490ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775381875, "uuid": "326aa40e-eed8-42f7-8d2e-7ce777159fe1", "comment": "Malware payload (Mirai)", "value": "d49d209b223b3daa2dbb022a21ac9209dae67372e9a4973f1a6954fdbbf59017", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775381875, "uuid": "b22bd7e1-7f10-4877-b6cd-80f33213f121", "value": "T1E5330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775381875, "uuid": "bede34d2-c001-42a8-9b97-4a12d3ac8c1a", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGP:r/hqaJMDg9eqK806MHdkfQX6HuCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775381875, "uuid": "0b8776dc-4e8a-4cf7-8958-001b2e1fb65c", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775381875, "uuid": "0f093eff-3cc3-47f4-8af1-4820201a419a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fc54508-30d7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775383700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775383700, "uuid": "894d23f6-8744-41c5-9af6-7bd0bd383f7e", "comment": "Malware payload", "value": "93f7ade372b87507fcffb5b4da64cb36", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775383700, "uuid": "65f4307c-1bca-445d-80e2-6e051cee44ba", "comment": "Malware payload", "value": "dfaa53ef4d7b3428aff5948e254010ecbaa08727b1b70cf75537d82b98cd9eb4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383700, "uuid": "e0389d5d-6cc9-4a61-8954-cf90a34b49d0", "value": "T16803E096B6ACFC78F87A963144741264FB6339602F3387AB012D747A7C765922A50B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383700, "uuid": "d1a053a7-8b53-4261-84c3-40b716578707", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383700, "uuid": "ebd151c6-3dbe-43f6-b1d3-59554ce5674a", "value": "768:MO7LbZgoEUd7spY5cEnyt2hNEY4WZaBblEf6xjuVBZGHp:p7LbZgTQ5cr2hNsLEf6lkSHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775383700, "uuid": "f4b97e0a-81f8-4fd4-a7a4-89c8ba8744f3", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383700, "uuid": "cf275eb6-5f20-452e-a803-e30176b052c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1275238-30d9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775384750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384750, "uuid": "0a48c98d-2ad2-4c5f-96e5-41b5bda0b707", "comment": "Malware payload", "value": "13b26f22e8909a9b8d564637ad01dc0e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384750, "uuid": "9673c25d-708e-4a98-bec2-5730b3fa8f47", "comment": "Malware payload", "value": "93ba02b7780426cd8fc5315ad87a6e56e40d9d1bb8b08e3743979cab072c17b3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384750, "uuid": "c175b466-8132-4734-bbc6-9691ec0d0fdf", "value": "T12A03E055B6A8FCA8F8BB863044651368FB6339602E3347AF012D747A7C765916A50B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384750, "uuid": "bd395e99-4217-4ae9-a386-2bb7793ba78a", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384750, "uuid": "e7a2d5d0-b367-463a-bc0e-ffaa5f62bc5c", "value": "768:7O7LbZgoEUd7spY5cEnyt2hNEY4WZaBblEf6xjuVUGHp:y7LbZgTQ5cr2hNsLEf6lkHHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775384750, "uuid": "1ae6512d-216e-4f37-b159-88da61654277", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384750, "uuid": "caf1ab48-06ea-4485-8470-62a8ccf814bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "980d8580-30da-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775385083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385083, "uuid": "d52d1640-4bf8-4ca6-a0b0-725b54adc2fb", "comment": "Malware payload", "value": "84caa1b6115d0f6a2e96942bc41306e5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385083, "uuid": "0ff80dad-4ee8-42c4-99ed-ac5d30367002", "comment": "Malware payload", "value": "1461d81916a2cec46d806341b76e35e2df6fade2e9f441217fe93137a0967a0d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385083, "uuid": "dfb133de-345e-4f47-bd72-31daff72a8ad", "value": "T1AA03E096B6A8FC68F8BB863144741674FB6339602F3387AF013D707A7C765916A50B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385083, "uuid": "a3d448aa-3f4e-464f-a5a3-523d37768f57", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385083, "uuid": "d49d28ab-18e7-4f4d-9fc5-3688acda9cb8", "value": "768:JO7LbZgoEUd7spY5cEnyt2hNEY4WZaBblEf6xjuVNGnp:M7LbZgTQ5cr2hNsLEf6lkcnp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775385083, "uuid": "dfc9c864-a167-4544-94fa-d3d714ae737e", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385083, "uuid": "3d711a79-f0c7-4713-8c2a-4a10dad90994", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bee9549-30dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775386378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386378, "uuid": "07f32391-92fb-485a-bdad-ca07263fd83b", "comment": "Malware payload", "value": "f2749b55c5588354082e85ee86d522c0", "object_relation": "md5", "Tag": [ { "name": "Adware.QQpass", "colour": "#6a876e", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386378, "uuid": "f3718dd3-f6e2-45c6-81ed-27b2c6fba596", "comment": "Malware payload", "value": "3991ddd4529ad0cb0bca1c491a16f09646feea9647fbcb9c1e18f7d220d2222b", "object_relation": "sha256", "Tag": [ { "name": "Adware.QQpass", "colour": "#6a876e", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386378, "uuid": "90f97f87-3679-4354-8600-0b9975f743c4", "value": "T1C8163381A6DF57A7F49CA9B14E7F1CBA1612048D3245C347C1296EEEE2FC94637023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386378, "uuid": "e16c826b-95a4-4bd0-acec-cf1da9bb6951", "value": "51a854d285aa12eb82e76e6e1be01573", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386378, "uuid": "ff5ace10-102b-4fda-ba47-29be5c51ec81", "value": "98304:9ybHtmk4oNQ9z/rQ85+Q3ceVEOgqHKrIul6ChAwBliBH:iugQ9vQ85+Q3ceg8KEu/hA3H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775386378, "uuid": "d15982bf-5c73-4962-bf14-07e29bd8db18", "value": 4242474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386378, "uuid": "d2735060-fcf8-4bcc-9fd1-5502b093261b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a30fdd0d-30dd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775386390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386390, "uuid": "c5b45db8-ddf7-41e7-b778-4359470f481f", "comment": "Malware payload", "value": "e49887d8fa951c1b04eca5519946b716", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386390, "uuid": "b9495e54-b5dd-46cf-b8a7-ebb92f4b2cf3", "comment": "Malware payload", "value": "985d90e2067b0db89cbe55c067e961318989b0db0d0f930fd102e625cf62383b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386390, "uuid": "f8215445-629b-4712-98c5-81f195bedb8e", "value": "T1B503E096B6A8FC78F47A863104752374FB2339602E3387AF052D747A7C765916A50B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386390, "uuid": "cb37296e-070d-49f7-9579-5de8d5a75280", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386390, "uuid": "6539904b-816f-4e13-94bd-9ae35650e0f4", "value": "768:bO7LbZgoEUd7spY5cEnyt2hNEY4WZaBblEf6xjuVxjGnp:S7LbZgTQ5cr2hNsLEf6lkAnp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775386390, "uuid": "822a5409-578d-41de-8c4c-d3a5ba5fa298", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386390, "uuid": "2bc3bb38-a311-476b-bbf0-330d8bebda48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "709933d5-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775398761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "dfacb1d7-6573-43ed-a89e-e12e1dff7a6c", "comment": "Malware payload (Mirai)", "value": "22a16d33f17e023780ffea4bddab3ab0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "3ff00ea0-8b66-49ed-88a3-77f0ff946069", "comment": "Malware payload (Mirai)", "value": "aa6128e39265eba5c759443cfaa56e9a96b02c9967e4996e362bc1600568363c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "55492688-fc63-404b-bfc1-c1eb4ade20cd", "value": "T16EA3E626AF201FFBDC5BCC3765A4170534CCA91A31A67B767534D828F68B24B86D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "5f58699b-903d-405b-b75d-627cd4079153", "value": "1536:KKCAbhno4peAlp+sPcicNLrNwg+p6QDbZ63il688geWKEro399wghgmCvd42+bt:pCWhno4peIp+sPcicNLrNepkh9wh2t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775398761, "uuid": "8c6dc6bb-4052-459c-bdc4-b2af07689883", "value": 100680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "81ad4cf7-c0c3-483b-acfc-d3960e4bfa23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "709f59ce-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775398761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "2edb0098-7a70-4c55-ae89-d46e9b068ddd", "comment": "Malware payload (Mirai)", "value": "5273b68437468b6313f87854fe7192f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "9953a599-50b2-412c-8325-fb37a9cfd11d", "comment": "Malware payload (Mirai)", "value": "937bb6c0b76f5fd43f66bc03ccb67962003e16b74a39f65f4bff29f88017c3b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "fc04134f-8cac-4413-9e18-db8be47d5fa1", "value": "T14B537DB2D46D6FD8C0541CB479748EB81B63B40880276EB36A4B87A558C7EBDF408B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "3088f6f7-d7c9-4143-a234-4041ad6e6d7c", "value": "1536:jSY+mE6SBWZ1hB3nBT3cHLcjF9ReFd42+:jSY+ESBWZ15sb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775398761, "uuid": "18a9ebcd-b3d6-4ef9-ac42-947960368fb1", "value": 63956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "55f27469-4c94-41f0-9352-75d8ef5bb156", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70aab7f3-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775398761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "bfa100b3-cd2d-4184-ab33-d5a509328901", "comment": "Malware payload (Mirai)", "value": "28be67f402f75b76698384bc12a80ff2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "b081c296-19fe-4172-a307-a5d1a9878cf4", "comment": "Malware payload (Mirai)", "value": "87bf5a1ec28f63bf65bc6d19b859c09c85e81e43bbad5e361a5a7190ca53fb14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "4c9d4c35-e28e-439e-b2d0-0e2030a6b75e", "value": "T19493C80A6E158FACFB9E823187F79B21535433A62AE1C545D26CDE001F7074E750BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "71ce39e1-1a76-4b9d-8fd6-45727ffbb8af", "value": "1536:U2ExoFE2aU/vcoWociNwdXd9BpDG+GgwmOlU3b40OoOWnm1lA37gCd42+j:UFRU/UHi2dX5pggwob40OoOXSg22", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775398761, "uuid": "4de6db22-5d95-45b1-ab38-1119297c5e83", "value": 96584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "013d5649-13cf-443c-97f2-b4e89e86e1eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70ac93fc-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775398761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "2c21c6ea-34e3-40c8-a50a-1feb16365f65", "comment": "Malware payload (Mirai)", "value": "a83397df735d1c6886462b83af0524bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "20b99196-f9b6-44f3-8111-ad8bb4ed87e0", "comment": "Malware payload (Mirai)", "value": "5dc6ab4d9c9f2b5fc47ac924f6d2027a20be5510bbc0fb46a15e263cee085e97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "a25eb133-16c0-432c-8953-4a8d4f54812c", "value": "T1AF730841B8818A56C5D412FBFA2E018D3335A3E8D2EE7206DD216F683BC692F0D777", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "920f9322-5950-40d9-9ca9-b3fdf65771cd", "value": "1536:ubIleutg5xQ7vQx+hKzENLFtar7YS5a6bJjKJZrEylTiFbz65rQd42+:CIlim7Ix+YMmr0gzJuz4ylTiFbz65E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775398761, "uuid": "1c386b56-a1c6-4ddb-8969-4a163f1652c0", "value": 75104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "ae876c66-7938-4c36-a7f4-72dea81d1b98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70b30f6e-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775398761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "6aab6ed1-2c0c-45bc-8046-ab213acb8990", "comment": "Malware payload (Mirai)", "value": "782bf6b895b31b98b2c03415b5939328", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "54f14ede-98fd-4d52-9da0-c5c9d013c2b0", "comment": "Malware payload (Mirai)", "value": "17ae998f4402c05125f27d1b859dd7c93cb488a2a3576c5e114f5f6b0564bdc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "4557c411-3c66-4c52-91b6-ea32a47764cb", "value": "T1F3634C0332280D47D9621EB0352F07E093BEFD5123E0B68A274F7E954579E76158AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "7a34f9fe-b9db-4d60-b24b-ae34eb266f6e", "value": "1536:Bz30OgRXOB+N2A+IVwa+pXtqd8Sv6pGnlvXpTzHd42+R:BzkOKOBiZVSAdu6TJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775398761, "uuid": "40589917-d65c-414a-93ff-6df4f9b5177e", "value": 72204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398761, "uuid": "ad2bb234-72bb-4da7-99c5-e254aad00d7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16f41eaa-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775403261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403261, "uuid": "959cdbe0-2dbb-4923-935b-7edc43b567d2", "comment": "Malware payload", "value": "b7c1fb454c8c20aa7fe7aeb6180d412f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403261, "uuid": "bbfecdc3-47b7-4382-830c-66ec7c6e8b5e", "comment": "Malware payload", "value": "810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403261, "uuid": "53382beb-9f74-4ad6-8cd9-33b838b48784", "value": "B9B2E18622993703A4635AF4F27D7F8A72067D68AFBE943B45503123707321E6758C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403261, "uuid": "3d56f66f-991d-4bb5-ac4d-7de251d2c231", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9LrEQSXh:YTYIDfYG6ZmewZ59+Nw1qsREHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775403261, "uuid": "42a7f0fa-3be4-4660-a4e5-3365287d926e", "value": 24616, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aae6f435-3105-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775403583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403583, "uuid": "b1ed4af2-4dbc-4b2d-8450-85c591082a67", "comment": "Malware payload", "value": "3190a154ea95752b9121fb9763fe8f50", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403583, "uuid": "8a1b3f41-8e6d-4991-98bd-e705aa8d0041", "comment": "Malware payload", "value": "a8476f88984384bd47c2eb27416f3252d9d007401a5a1997c7c5dbeff4845a68", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403583, "uuid": "a4e26a37-9dbd-45c5-bc56-5441f8ace17a", "value": "T1DA93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403583, "uuid": "57fbe28c-f780-48a1-8855-0425bfab6047", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXiIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775403583, "uuid": "25c5a8cd-218a-43fa-a5bc-5f34d7039b21", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403583, "uuid": "8276adcc-9f11-48ae-949c-b8727befaab6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94635eb6-3106-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775403975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403975, "uuid": "61eed191-e01d-48a1-bdcc-f7f740fc206f", "comment": "Malware payload", "value": "7abff55bf8ff0075afb3a3ff2ad9d7f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403975, "uuid": "98a373e9-a6b4-41d4-8d06-de8befc28873", "comment": "Malware payload", "value": "b67cd5f540094b7a2dea1ba92f3ac7a3c0ecfe67975ed947a1203cefe41f3a42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403975, "uuid": "b92cc857-da1b-442d-a468-65d9bc967303", "value": "T17006338D0C1D9FE2D2888BDD3B6E33E25AD039B15DE4102C2E8D99D745B9CE787963", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403975, "uuid": "053ddafb-0c09-41a2-b13f-748506b40b95", "value": "98304:z7oBJ0g8+4sObL8hr+gH2plIeaSv0ou8XRct8ipc:3o70g8vPE2Gp8K6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775403975, "uuid": "deb6a7ef-73c7-4745-9a6b-6035f33df8cd", "value": 3722808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403975, "uuid": "4f4bad87-a252-4937-a839-0a45c9b71e80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cb6632f-3108-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775404821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404821, "uuid": "556a5a1a-613d-41b6-a993-60ce0d3d9cfe", "comment": "Malware payload", "value": "2cad036035a6c18444485f6e8fac0833", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404821, "uuid": "93221963-6869-4e0f-98f8-7c6226c9d304", "comment": "Malware payload", "value": "177c5986e5d990766abb4b91393b51154f675091932fc0a121643f7fa8251943", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404821, "uuid": "22b7d4ea-0761-45c1-9b44-4cbda60182e7", "value": "T1F28309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404821, "uuid": "9eb2f9d8-e142-4216-996e-f792672cbdfa", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn9Wa6VN/:XEKltp9txAX/yr2pb9WXVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775404821, "uuid": "19359ab1-d259-45b2-b964-700d38749885", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404821, "uuid": "8f5179f0-89b1-4e0c-9f05-8ce887a0ce92", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ad85f4e-310d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775406912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775406912, "uuid": "55738859-185c-4e9d-9b1c-581c10fc04f4", "comment": "Malware payload", "value": "4002349040efa3ef10df89c46b078e83", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775406912, "uuid": "92eaed88-975e-4cd0-980c-da3d69eeebe0", "comment": "Malware payload", "value": "cc0f0d1096c9129097346f8e32b36f6960351cb7e1678069536f86d2e4388a53", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775406912, "uuid": "f4e83acc-da9a-41f1-a17a-22cb67862d15", "value": "T126931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775406912, "uuid": "a67391e2-76e8-4eb2-b343-534631f98008", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKc1sPyKzt8:08jI00GitkbFv2v05xsprO1sPykt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775406912, "uuid": "19db3b88-14f3-49a7-af1e-8c54b20b2179", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775406912, "uuid": "3d62de1e-b296-43b3-8a2d-1efdd2fd0dab", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7532ef41-310f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775407788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407788, "uuid": "94169924-18f4-4f44-bc52-a60df20df623", "comment": "Malware payload", "value": "c0c027f09a5433fd43c363fa44f3af13", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407788, "uuid": "16c4221c-1ca6-4c15-b234-feaa3bc14cc6", "comment": "Malware payload", "value": "cbaeaa4b58fced59013acfe3eab94e3164d010d8ad39b6797353c6ce411bd84e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407788, "uuid": "87a1fb6d-a463-477e-abfe-e3e3a3279e37", "value": "T150963323A56449C7D43AE27BA1F216C143D7320AF943D4BAEC917ADC76E27C948C87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407788, "uuid": "aa3cf1f1-626f-46eb-a2aa-646f3c321985", "value": "196608:+Zftl+WEg2XhVXzEzNr18+Pj9Ri70uU+HB/OGUElH6XU8YYlbHXUf:+BZEg23Exr18+Hi7rU+h/PUEl0U8YYlE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775407788, "uuid": "63ad5b50-ed7a-4f8c-842b-b8053e99f48c", "value": 9439702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407788, "uuid": "3b226957-f6ac-4e27-a477-4140beb6af6a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15555555-3110-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775408057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408057, "uuid": "ffdd23fa-88f2-47e8-b3b8-b8323d151298", "comment": "Malware payload", "value": "bdbf0b4b6757f3cb426e15d8ea7d88e4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408057, "uuid": "d4f03474-1303-4284-bc1c-3c6105f9c91e", "comment": "Malware payload", "value": "39862e3c7248f058a44330c728d3a5c293134115336f33cbc9ac7938ee6326f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408057, "uuid": "ee223e81-1b17-40cf-8cf9-650f634daa9d", "value": "T1BA24BEBCF1058317B9F56BF5B234645E240F066270A1BB8DAF7866FE5E0960D8487A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408057, "uuid": "827db19c-8ae3-432a-8eab-669cff3ba82e", "value": "3072:sWUwBpogvDUYoTMHQ/x9cxnRcW0cJvRy+br+8sBFjLX7ql7j+RETNooG:LocDMMHQ/xp+RyT8sBFjLXrRETi5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775408057, "uuid": "d9d59abd-503a-44ed-a62b-7f91a86449c6", "value": 223307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408057, "uuid": "38ca385b-b206-44a6-b672-78ed7159073b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a45eaf24-3112-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775409156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409156, "uuid": "0e4ecf30-1ef7-4da1-bf61-b52677fe47c9", "comment": "Malware payload", "value": "b63a5050ef0f702dd531b60cee59e2d3", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409156, "uuid": "8cb77889-82fb-4f6d-b49a-749c3d991c1e", "comment": "Malware payload", "value": "32652a3a6d737ef23dca383b12291818e5f7b1baaf30b75fbf344ec4d0133c26", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409156, "uuid": "ef241d46-a8b1-4cb1-9c4d-e8eb41acb93d", "value": "T1878601277D86CA29DF9740B351CA8153742A12D9EA0BD02F06E08DC95E79DDA03D2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409156, "uuid": "8c47d1da-bc2e-497c-865a-e2af982d6feb", "value": "196608:y6GBs2wsGIV9yvRmqFzpVlRELbRs2A4LoCJezt/L:yVC2whIjyv1FrlGZs2/Lodtj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775409156, "uuid": "0b5a0dd6-adf7-4fbb-a65c-803a202248b4", "value": 8090097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409156, "uuid": "58760e6a-deff-48bf-8b63-d7c6d979bdd7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ade18543-3113-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775409601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409601, "uuid": "4fb2638c-3b63-4022-b075-965a2419a236", "comment": "Malware payload", "value": "6507be4a77ee19272f2ce8e7033151e6", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409601, "uuid": "2f154901-cad6-47d6-8203-365e5b901e41", "comment": "Malware payload", "value": "f12e7dc3991b1b180d3622002354d5a07f8a546441a115e2f26e63cec123f06f", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409601, "uuid": "98365182-89e3-46e3-84ff-c81a66fbaee9", "value": "T18D830F326DC1B07B00A3B1D19A226B49FFD59247CB879920F1EC97879FB7E95AC231", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409601, "uuid": "d171ba18-456a-44d4-a481-538810b05593", "value": "1536:TUP3jLJE+H+F+s+h+u+3+s+B+u+3+s+Y+u+3+s+5LpYCxflTGBK8sRU9l9x9oYl9:VLpYCxflTGBK8sRU9l9x9oYlPBEMn1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775409601, "uuid": "141e884d-91ac-4ca6-9b07-a40e05003f79", "value": 81649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409601, "uuid": "6cce0d3a-7bf7-45d7-a602-aba26e5b0064", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1775416287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416287, "uuid": "89ac06d5-5fc3-4105-a838-75988cf37140", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416287, "uuid": "c39462e9-dfa0-42b8-bb7a-43430d58a1a3", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416287, "uuid": "db5641ff-e71b-442f-9e7d-695896b8c292", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416287, "uuid": "528a16a7-e8d3-408a-93e0-cdb14929639c", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775416287, "uuid": "bf8285a7-d3cc-4aa5-8efc-874a227105a6", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416287, "uuid": "35af18dd-177d-4320-bd01-f29a9e743660", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cf89623-3123-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775416337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416337, "uuid": "774ee372-097d-4cf2-adaa-aa6f1174ffc7", "comment": "Malware payload (Mirai)", "value": "75a080186e950aa3a9a9bec234af61b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416337, "uuid": "d67f03b2-7a89-4ea5-bfa1-1f00a07008f5", "comment": "Malware payload (Mirai)", "value": "d0128b85cfeddde1460870350f0ed3c820672177b890cf3fa21e6ee74e5727fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416337, "uuid": "099cb50a-c2b0-4ae3-ae1a-2b4af654fcdf", "value": "T1DD43018140DE4A02CBBB2077A2CFDA078982868616C207DDBFE8791468CEB7577577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416337, "uuid": "888cf8ef-80f0-476b-b417-48c3f01029b9", "value": "1536:L/2gJkgfeSjUUmZ9rqzG/u486qytSRO6/Kv+BUnouy8HyQ:CEJNs9+zCNjtiJM+BkoutP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775416337, "uuid": "bb370bd8-64d0-43ad-bb5b-3bcd9044ae3b", "value": 60020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416337, "uuid": "4f1edd61-d081-42b5-857d-aa375618016d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a2302ca-312b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775419876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419876, "uuid": "8ccaa4ca-caa8-4e52-960a-374b20f279de", "comment": "Malware payload (Mirai)", "value": "56e725a176b7972695b78c0c25c1ee29", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419876, "uuid": "975e7212-5fdf-433a-bfd9-b95c3500385c", "comment": "Malware payload (Mirai)", "value": "215cb89e6c95ba74ea76a8f51d13943fba308f97aa936a472a6741a15f1373a8", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775419876, "uuid": "ba31319d-6f8f-4756-83a7-d4da19f239b6", "value": "T15FF2F2EB7071564DF3E9133EAD7E775EA420C895C18A4BF698DC3CA7A803B401B951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775419876, "uuid": "934fe490-fd56-4815-b958-adb07a56849e", "value": "768:tEded4T+1hjLDfdsiBiXNMViqLUklvmqQ3aqOe8TjG+rnbcuyD7UHQRjU:t7d4KLDfdhI9MVVLUkluqjqMjGcnouyO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775419876, "uuid": "e6b08e50-beb1-410f-8684-fefd195ccda2", "value": 35676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775419876, "uuid": "76753fa3-5998-4e0e-8784-5bdc96739d46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775430039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430039, "uuid": "4cc473c6-ee7b-4cd7-bf31-d44d6b1b2c08", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430039, "uuid": "bbd86e64-4f79-4ec8-86d1-74e2e7db5675", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430039, "uuid": "277376ff-a043-4cfb-9066-d624ea91b8aa", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430039, "uuid": "1cf14df3-6600-4204-a4c1-fa1a2199ac75", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775430039, "uuid": "eb27b963-30d2-433d-8e85-ae995347b1d3", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775430262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430262, "uuid": "8258da81-1204-484d-b4f7-479eeda12de1", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430262, "uuid": "9ecfc732-cfd3-44be-891e-afd5c31a8ea5", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430262, "uuid": "e58232f4-c212-4865-a779-9f02ccb6db85", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430262, "uuid": "549a44e1-bad8-486e-b5e3-d7ca50a6b3f9", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775430262, "uuid": "c26896e6-bc26-4d8a-94af-13302a05e34a", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348171, "uuid": "a675860c-3084-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.48.14:56706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348539, "uuid": "82066fe5-3085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.241:53155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775348835, "uuid": "32949fb5-3086-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.213:38959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349199, "uuid": "0b99ffa9-3087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.225.50:55881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349268, "uuid": "34cd1da3-3087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.231.238:47812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349428, "uuid": "93c5d55f-3087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.191.203:38004/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349488, "uuid": "b7d50ae7-3087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.41.216:49027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349549, "uuid": "dc365e96-3087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.251.64.35:47064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349550, "uuid": "dc55d938-3087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.46.46:43999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349918, "uuid": "b81f65dd-3088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.46.46:43999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775350026, "uuid": "f8930072-3088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.191.203:38004/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775350809, "uuid": "cb3be1cc-308a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.225.50:55881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775351226, "uuid": "c3767821-308b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.251.64.35:47064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775351841, "uuid": "323ae323-308d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352434, "uuid": "9386faee-308e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.170.75:49227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21a7b2a2-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21abb0ea-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21af1a71-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21afac50-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21b612de-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21b98497-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21bbb541-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21bbb8f9-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21bfffd3-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21c22cb9-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353102, "uuid": "21c97e27-3090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353629, "uuid": "5bd1ec5c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.208.245:53324/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353640, "uuid": "62887148-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353641, "uuid": "62c03d01-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353641, "uuid": "6332dbb3-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.apk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353641, "uuid": "633787ee-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "635515ce-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "63794c1b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "637da05b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "637f31da-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "63825368-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "638425df-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "638433a9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "638574b1-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.apk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "6388f1a2-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "638957cd-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "638c6359-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "63946780-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "63c328a3-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/mirai.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353642, "uuid": "63c74e71-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/mirai.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353758, "uuid": "a8bc27d0-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce0bb4a2-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce230ba7-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce2a8c60-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce2c8b37-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2ppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce2e5e3e-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce34ffcb-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2riscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce63f621-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce77a9fc-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce889c4c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce89f27d-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce8b8e6b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce90f425-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353821, "uuid": "ce92232c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353822, "uuid": "cf1919b5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353824, "uuid": "cff2162a-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353826, "uuid": "d1106e6c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353826, "uuid": "d17fce2c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d205fc41-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d2068662-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d20899e3-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d208d70a-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353827, "uuid": "d2301038-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2amd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353828, "uuid": "d26d4afb-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353828, "uuid": "d27cb823-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "d30f7568-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "d312a982-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "d32bdb8d-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "d32e20e8-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "d32e45ef-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/droppermipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353829, "uuid": "d32ee67c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "d3780ac9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "d3d53f67-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "d3d54a20-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "d3d59a89-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353830, "uuid": "d3d62c08-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "d4695d07-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "d4695dd5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "d474085e-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7x64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "d47da51e-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353831, "uuid": "d4840de9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353844, "uuid": "dc159645-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353845, "uuid": "dc8d3ddb-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353845, "uuid": "dc8eafa5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353846, "uuid": "dd16081c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353846, "uuid": "dd7da767-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "dda1ca4b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "dda2729c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "dda5fc77-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "dda9b16f-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353847, "uuid": "ddf12c19-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "de42eedb-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "de8bcaca-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "de99731c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353848, "uuid": "dea8688a-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353849, "uuid": "dee4ec90-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353849, "uuid": "dee4edd8-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353849, "uuid": "dee8a221-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2x86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353849, "uuid": "deeaf2d9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "dff28ede-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "e00284c6-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "e00287dd-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "e057021b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "e060b610-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353851, "uuid": "e06a4c40-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353852, "uuid": "e0b0cb17-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353852, "uuid": "e0b361dd-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353852, "uuid": "e0b75744-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353853, "uuid": "e138b0d5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353853, "uuid": "e1411118-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2x64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353853, "uuid": "e1a5678a-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353854, "uuid": "e1b1ef23-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7prox", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353854, "uuid": "e1eafd26-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353857, "uuid": "e37a4500-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353857, "uuid": "e401f2b5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353857, "uuid": "e403da39-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353858, "uuid": "e42ba682-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353858, "uuid": "e42c8474-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7x86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353858, "uuid": "e439cc5b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/client", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353858, "uuid": "e48947eb-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "e4f20575-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "e50a2727-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2riscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "e52156a8-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353859, "uuid": "e5265cbe-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7mipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353860, "uuid": "e564ccc5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353860, "uuid": "e5700d99-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353863, "uuid": "e75ee40f-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353863, "uuid": "e75eea35-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library232", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353863, "uuid": "e75eed56-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353863, "uuid": "e75ef1b7-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353865, "uuid": "e83f2e1e-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353865, "uuid": "e866d702-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353865, "uuid": "e8957aa8-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353868, "uuid": "ea234813-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353869, "uuid": "eafe6ef2-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353870, "uuid": "ebbd0982-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353871, "uuid": "ec2a6c52-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353871, "uuid": "ec2b8dc9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353871, "uuid": "ec599a72-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "ec79616a-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "ec7bdc23-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "ec7c1abf-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "eca7f666-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropper32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "eca83673-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "eca8b781-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353872, "uuid": "ecfb1179-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2mipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353875, "uuid": "ee3681f2-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353875, "uuid": "ee96a579-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353875, "uuid": "ee96e1f4-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv232", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353876, "uuid": "eee8dcce-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353876, "uuid": "ef158081-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353877, "uuid": "efcc7516-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353878, "uuid": "f060fe49-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2ppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353878, "uuid": "f084cffb-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353879, "uuid": "f0dbd83f-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353879, "uuid": "f12091b9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353880, "uuid": "f17f8f5d-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353880, "uuid": "f181e39f-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353880, "uuid": "f1a1ef66-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ack32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f1e34728-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f1e38cba-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f1e3df60-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f1e447f4-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7x86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f21ebe5c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2amd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f224582d-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353881, "uuid": "f2475b29-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "f27ba616-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "f28b06c6-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "f28e1af0-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353882, "uuid": "f2d13896-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "f34352d2-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "f34363b2-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "f357a17b-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "f3688606-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353883, "uuid": "f3781fd7-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/droppermips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353886, "uuid": "f5208246-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353890, "uuid": "f76262dc-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2aarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353890, "uuid": "f76b1d54-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7prox32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353890, "uuid": "f77ee4a3-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353892, "uuid": "f8e78cfa-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353893, "uuid": "f92f8035-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353893, "uuid": "f9309141-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353893, "uuid": "f93b541c-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353893, "uuid": "f967c243-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353893, "uuid": "f983da18-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f98874e4-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f99cf313-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f99eb842-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f99f529e-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f9aefc64-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f9bcc806-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f9be0e2f-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f9c8faf5-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f9d2c6b9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353894, "uuid": "f9d4b249-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353895, "uuid": "fa7f5bf9-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353896, "uuid": "fb1c8dd7-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2x86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353896, "uuid": "fb1c9c97-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353900, "uuid": "fd525b3a-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353900, "uuid": "fda8ccf3-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353901, "uuid": "fdfbc645-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353901, "uuid": "fe02c5ea-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2x86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353901, "uuid": "fe030c9e-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7armv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353901, "uuid": "fe1b4382-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353901, "uuid": "fe310575-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353901, "uuid": "fe457e09-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353902, "uuid": "fe5754cf-3091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "0056f182-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "00581165-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "0068e607-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "0069ffe4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "00769e82-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2x86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "007db85f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "00836328-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "00858609-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353905, "uuid": "00996e83-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353908, "uuid": "02627d3d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353913, "uuid": "04f1976a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353913, "uuid": "0554f20e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353913, "uuid": "055883cb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353914, "uuid": "05f8260a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "062eb431-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "062f444a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clienti686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "06532af8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "069e57e1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "06a2c1b9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ack", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "06a3cac8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353915, "uuid": "06a483d4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "06d90190-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "06e631cb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2armv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "06e9e1b6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "06ea4b6b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "070c701c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353916, "uuid": "0713997b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353917, "uuid": "0776cf54-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353917, "uuid": "077b00b2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353917, "uuid": "07a30a36-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353917, "uuid": "07c7431d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353918, "uuid": "07df8a3e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7ppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353918, "uuid": "07df8b92-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353918, "uuid": "0834ef1f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353919, "uuid": "090077bf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353923, "uuid": "0aeafc05-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353923, "uuid": "0b4e40c7-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353923, "uuid": "0b4e8b8d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353924, "uuid": "0b817fc0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/droppermpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0de928dc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0df4f181-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0e1d7296-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0e1dd394-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0e3dcde2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0e3fb358-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0e41a5d1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353928, "uuid": "0e4232a6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0e898095-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0e8a4205-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0e8de133-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0ece57b2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0ece613a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0ece621e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "0ee61b2d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353930, "uuid": "0f0dcb08-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li732", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353930, "uuid": "0f1c22cb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7aarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353930, "uuid": "0f83d6c3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353933, "uuid": "10e1e1ac-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353933, "uuid": "1146e986-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353934, "uuid": "119ad15d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353934, "uuid": "11e6a151-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353935, "uuid": "12189683-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353935, "uuid": "1247352e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353935, "uuid": "12819b45-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353935, "uuid": "128db77b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353936, "uuid": "129ef346-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353936, "uuid": "12a450ff-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353936, "uuid": "12aca86e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353936, "uuid": "12be1ede-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353936, "uuid": "12cfa790-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353937, "uuid": "137e306c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353941, "uuid": "15b746a5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353941, "uuid": "15cba736-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353941, "uuid": "15cdc0ef-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353941, "uuid": "15ce76bb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353941, "uuid": "15db812d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353943, "uuid": "1711c33c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353943, "uuid": "17434f62-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353946, "uuid": "18cb1ab0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353946, "uuid": "18cbb36d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353946, "uuid": "18d252b4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353948, "uuid": "19ee8911-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropper", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1a65bdc2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1a6b15d2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1a7a18ef-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1aabfb4f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2armv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1aad01dc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1ae67b42-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1ae6b48f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353949, "uuid": "1ae8132f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353950, "uuid": "1b04293b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2arm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353950, "uuid": "1b140a51-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353950, "uuid": "1b179759-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353952, "uuid": "1c4dc803-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353954, "uuid": "1d692918-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/client32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353954, "uuid": "1d8f22eb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353954, "uuid": "1da92ceb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353954, "uuid": "1daea46c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7amd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353954, "uuid": "1dda7a59-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353954, "uuid": "1ddbd9ee-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ackarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353955, "uuid": "1e6a7554-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2x64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "1ea7e0ff-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "1eba4283-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "1ef15374-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7riscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353956, "uuid": "1ef30fc5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/clientppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353957, "uuid": "1f34e6fe-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2arm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353957, "uuid": "1f568112-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2aarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353957, "uuid": "1f5d2e2c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7i586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353957, "uuid": "1f62889f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2i386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353959, "uuid": "20673fc8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353959, "uuid": "2067e9e1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353959, "uuid": "207a9113-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353959, "uuid": "2093a7fa-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353959, "uuid": "209a80a2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/gofuckerv2mipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353959, "uuid": "20aaf247-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/li7proxi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353996, "uuid": "365c9fce-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353999, "uuid": "385cbd32-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354005, "uuid": "3c4909ad-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "3ca20ae7-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "3cd0a224-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "3cd85ed1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354006, "uuid": "3cda156d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d27de00-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d28f2f2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tci", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d44357a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d55154c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d5563fb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shand32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d58ba9d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/six86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d5fe26b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354007, "uuid": "3d61e4da-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "3d7f98c0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "3dd1cc6d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "3ddc319b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354008, "uuid": "3e08a1c1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e213d2f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e214a82-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e2339be-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e23b8c4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e2b3200-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2x64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e31cc19-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/simipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e358784-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e40e7cf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e41689c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e41ab32-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sock", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e441a56-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e48c437-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e551680-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e694724-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e71d877-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e739942-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e8f29b8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e9929b1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3e9d075a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354009, "uuid": "3ea75842-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354010, "uuid": "3eafaf77-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354010, "uuid": "3eb02d84-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354011, "uuid": "3f9099eb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354022, "uuid": "46443bf0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354026, "uuid": "48afe021-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354027, "uuid": "493dbbce-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354028, "uuid": "4970d7e8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354028, "uuid": "499e3b2d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354028, "uuid": "49a56805-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354028, "uuid": "49a5785e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/acki386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354028, "uuid": "49f341c4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354028, "uuid": "49f744c5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354029, "uuid": "4a0a26dc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4aa43a0a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4aa74479-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4aa75dc6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcix86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4aae1ab3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4ab2b99e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4acf4ee3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4aec227f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354030, "uuid": "4b2514aa-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "4b7c5d1e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "4b7ef53b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/librarymipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "4ba5e66b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354031, "uuid": "4bb96382-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4bdfc4af-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2amd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c0894f4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c0c77fa-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c0f5937-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c10b2ef-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c10be46-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c1f7689-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c21e220-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c30e893-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354032, "uuid": "4c612120-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rst32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4c73ce32-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4c74b196-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcimipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4c858e05-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4c8aaaed-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs232", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4c91e625-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4ca44014-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4cadb0e9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354033, "uuid": "4cd45918-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354035, "uuid": "4df3da1a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354035, "uuid": "4e002224-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354035, "uuid": "4e05c018-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.apk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "4fbe2a3b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "4fbf60e6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "4fc2c22b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "4fd1dcac-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "4fd2aa70-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354038, "uuid": "4fedb6c9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354039, "uuid": "5004ef9c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/simips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354040, "uuid": "5115a033-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354043, "uuid": "527cca9f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354043, "uuid": "52944c04-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354045, "uuid": "53e8d298-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354045, "uuid": "54046aaf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siix86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "54340953-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "5447ecff-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "54487ad3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "5448839b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354046, "uuid": "54508d92-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354047, "uuid": "54caa745-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354049, "uuid": "563e4000-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354051, "uuid": "578e5f95-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354052, "uuid": "57dc22c5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354052, "uuid": "57e28a1e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354052, "uuid": "57e99658-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354052, "uuid": "57eba719-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b653c87-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcix86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b6697e1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b66c07a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b66c87e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b66ed10-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b7aa22d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5b8d0cd5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5ba86e3f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/simpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5ba87469-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/librarympsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354058, "uuid": "5bb2cfc8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "5bf26392-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcix64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "5bf2fc91-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "5bf30c63-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "5bfaa636-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "5c17f6fb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354059, "uuid": "5c2b67aa-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5ca1d7c8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cadc033-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cb10392-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cb5c9b3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cda8a61-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cdbd48a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/six86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cdc43c0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5cf9f3b3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354060, "uuid": "5d08859a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d2323ab-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d3e0c54-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siack32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d588088-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d71b1db-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d7aa36c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d842ca3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354061, "uuid": "5d8a9890-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354062, "uuid": "5dbcc9d0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354062, "uuid": "5dccddfd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354065, "uuid": "5fb2c06a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354066, "uuid": "605359dd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "615130f9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "615151df-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "61538fb9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "61588544-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "61641d91-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354068, "uuid": "6174a899-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354078, "uuid": "67aad247-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354078, "uuid": "67bf5943-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354079, "uuid": "67d084b4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354079, "uuid": "67d4d3c4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354079, "uuid": "68021e1a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354079, "uuid": "6805bd75-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354079, "uuid": "684253d6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68843915-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "6885cbe1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "6895986c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68976a8b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcimpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68980aa4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68982b4a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68990031-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "689a39d8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sock32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "689f6d87-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68a8f5ab-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68dbbb4d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siimpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354080, "uuid": "68ef6527-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "690fd24e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "69611e63-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "69661a8e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "696a59ab-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "696be8e3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "697935b8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "69921fd6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "69949b8b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354081, "uuid": "6995111d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "69aed585-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "69aee53b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "69defa1f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354082, "uuid": "69e34ad9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2ppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c132b87-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c47b062-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c682c92-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c720c25-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/six86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c79987f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c7feb1b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c7ff34d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354086, "uuid": "6c84b490-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "6caa2b0c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "6caa2bf8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354087, "uuid": "6cb5fc88-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shand", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354088, "uuid": "6d4946f3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354092, "uuid": "700ac665-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "7062e1fb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siix86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "7078e00d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "70840ac1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "70898046-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708b3eaf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708baf59-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708c4f73-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708c5f1e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708c6da9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708c8443-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "708f16bc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "70a27dc1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "70a62824-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "70a9cc5f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354094, "uuid": "70cdf945-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354094, "uuid": "70ce63e9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354095, "uuid": "71e03f4c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354095, "uuid": "71eb8694-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "71f3b505-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "720f1547-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "72464406-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "73a211de-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "73ad1f2e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "73aec742-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "73aef8aa-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "73af3645-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "73b5f069-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354099, "uuid": "73ce9438-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354099, "uuid": "73cff4f4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtd", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354099, "uuid": "73d47296-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354103, "uuid": "765ccfd6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7802d7f0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7802e733-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7802eedf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7802f16b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "780316dc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7803180e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7805a4f0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "78095127-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354106, "uuid": "7822e914-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354112, "uuid": "7bac0b89-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354112, "uuid": "7c0a601b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7c5f6ef8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7c67d1ef-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7c7a731e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7c7d681d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7c905e3d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovh", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7ca16e99-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354113, "uuid": "7ca34b36-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "7cb38e8e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "7ccd470b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7d600864-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcippc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7d948be6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7d9bb292-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7d9f75d0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7db77664-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7db8a11b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7db97b2d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354115, "uuid": "7dc2cb0a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354117, "uuid": "7e84c5e2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354117, "uuid": "7eb07582-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "7f793856-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "7f90760c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtd32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354118, "uuid": "7f9d940b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siippc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "7fbc6c7a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "7fbc6c8f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "7fbc6e81-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "7fbc7fd1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "7fbc9702-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "8000ffed-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2riscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354120, "uuid": "80c4c4de-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354120, "uuid": "80c77e6b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354120, "uuid": "80d1dbbd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/library2i686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "81d39c2e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "81f1b87b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "8200e60a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354129, "uuid": "861d0d66-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354129, "uuid": "862184f7-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "863da95c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "863daf1e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "863dba1d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "863dd8eb-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "863ea8e0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "863f29e2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "86434571-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "864492c8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "86468e1c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "864f3a42-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "8652d51e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "8652e30d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "8652eb42-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "8661e64e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354130, "uuid": "8671bf5d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2aarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354135, "uuid": "89aa9c8b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354135, "uuid": "89ad4eca-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354136, "uuid": "8a439823-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "8c350407-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "8c79c2a3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "8c81d6c5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "8caeae50-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354141, "uuid": "8ce1f75f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354141, "uuid": "8d041712-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354141, "uuid": "8d0c6378-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354141, "uuid": "8d560476-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "8d6f0b50-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "8dbe9958-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "8dc23d38-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "8deba21a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e051d48-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e62aa20-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e6b253b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e6cf012-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e6ef627-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e6ef70c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e6fe3b1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e7605d2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354143, "uuid": "8e858aee-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8eb5dfda-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8ebb8239-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8eca9f44-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8edaa156-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/six64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8edbe08f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8efb1146-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8effc1a8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8f0f3b0e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8f1582e2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8f165f0b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8f20853c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354147, "uuid": "90a1c2ea-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "91c1b2de-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyn32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "91c1becc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "91c66a64-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "91cbf0f3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "91cd32a2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354151, "uuid": "930234e4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354154, "uuid": "94a10260-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354154, "uuid": "94f64ed6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354155, "uuid": "956a2158-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "97e4149e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "97e912d2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "97fb62f5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "97fcbd5c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "97ff95c3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "980bbb71-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "980e647d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "9819696e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siix86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "98198acf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "98198c9c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "98199a0b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/si32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "9819aefd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "981c4cd4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354160, "uuid": "982defe2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354165, "uuid": "9b9bc520-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354165, "uuid": "9b9f08a6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rst", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354166, "uuid": "9bef7eb6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354166, "uuid": "9bf19e86-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354166, "uuid": "9c100e5e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354166, "uuid": "9c320f67-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354166, "uuid": "9c328c63-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354166, "uuid": "9c3da95b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "9c47e2a1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "9c96092f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/dropperppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "9c9d4355-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "9cd77df9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9cda75a6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9cdb446b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9cfd9289-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/librarymips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9cffeaba-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d107903-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d1f0748-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d225664-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d28fa4e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d4c5b41-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d4cfb1e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354168, "uuid": "9d50c910-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354169, "uuid": "9d789e0a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2x86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354169, "uuid": "9d8b5a33-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354169, "uuid": "9dffcec5-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354174, "uuid": "a0893a98-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354174, "uuid": "a08aadbe-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354174, "uuid": "a0b254f9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcimips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354174, "uuid": "a1031995-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudp", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354176, "uuid": "a1c3d19a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a4098b49-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a409dd02-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a40a20c1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a40dc4db-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a4113e62-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a4139a0c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a4193de6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a4276964-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a42efb8b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a43d759e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a444801c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siimips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354180, "uuid": "a4449ae6-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "a6b9a1ec-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "a6c958a7-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "a6cbd9fd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a7169e40-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a717a4da-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a7198149-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a71cf0d0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a71d326d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a72bfc18-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a740e083-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a744ce0d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki386", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a76810ca-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a7687bcd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2x86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a76a4c80-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a76a4d8e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a76c9947-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siack", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354185, "uuid": "a76e02a7-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354187, "uuid": "a8638a09-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "a8f3b4ee-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovh32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "a93bd2ec-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sii586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "a945eb0f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "a94fa485-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354189, "uuid": "a96050e1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siacki586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354190, "uuid": "aa0bc6ea-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354190, "uuid": "aa0cc0ad-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "aa96f3d3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "aaf00f10-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "aaf1b22d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "aafaa4bd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "aafb9fe8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackaarch64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "ab00e026-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354192, "uuid": "ab2c2f35-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpi386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354192, "uuid": "abb04e4c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "abc502e4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "abd24236-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "abd29644-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "abd2b475-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "abee617f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "abf809ef-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "ac0f21bf-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdi486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "ac139d74-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354194, "uuid": "ac69e895-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354199, "uuid": "af7891a8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryi686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f0f57c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f0fa5c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f0fcfd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f103aa-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f104b1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f1057f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f53771-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b0f53cdc-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354201, "uuid": "b11c0f97-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siii686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "b11f6088-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "b11f6cd4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "b129fa1a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "b13f811f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "b17347a0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354203, "uuid": "b1dd3e12-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstmips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "b25c37ba-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "b3e64b41-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "b4047ee0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354207, "uuid": "b493e476-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4c486a8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4c575e9-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4c6171b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssyni486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4cb3d8a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdarmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4d138b3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiamd64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4eddb6d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354208, "uuid": "b4fc4363-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b6515515-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii586n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b6533747-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/mirai.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b657ec77-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b657f2e1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b6680d28-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tci32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b66c08f1-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv6l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b66dd8c8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354210, "uuid": "b6757666-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2armv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b84b71b8-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b84c5c2c-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b853d911-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/si", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b8546756-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm7n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b8546929-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sockx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b8548776-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryx86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b8577110-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcii686n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b86b05a0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2mipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354216, "uuid": "b9a55d4f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354216, "uuid": "b9c4f3f3-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siimipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354219, "uuid": "bb6b4c1d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ssynx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354219, "uuid": "bb6c514e-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354219, "uuid": "bbb59c36-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354223, "uuid": "bde296ea-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/libraryarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be498989-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be499830-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm6n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be5b373b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhi586", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be6547b2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be65f84d-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siiarmv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be67ddda-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstx86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be8b0d05-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/socki386n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be926f18-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mtdmipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be95f58f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2i486n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354224, "uuid": "be98311a-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovhriscv64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c0b88654-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/ovharmv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c0f1211b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandx86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c0f47b0f-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siarmv6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c0f4f9ec-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rstarmv5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c0f71686-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandarm5n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c0f7adff-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c10060d2-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/shandx64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c10e3947-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siix64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354228, "uuid": "c1118058-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/mclibs2arm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c3247f99-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/rsti486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c333fad4-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudparm4n", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c33416bd-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudp32", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c337ce48-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tciarm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c3383d00-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sudpmpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c33bd46b-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/tcix86-64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c33bf3ba-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/siackarm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354232, "uuid": "c35d3cc0-3092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/bins/sippc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354359, "uuid": "0f391a26-3093-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.150.79:33194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354839, "uuid": "2cfbde44-3094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.170.75:49227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354969, "uuid": "7a793cd4-3094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.79.204:54149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355012, "uuid": "9452c822-3094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.7:41625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355147, "uuid": "e4a571b9-3094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.162.63.145:52380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355191, "uuid": "ff2799fd-3094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.223.172:60731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355319, "uuid": "4aecde35-3095-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.1.82:59561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355678, "uuid": "211361f3-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.171:59403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355804, "uuid": "6c1a7e47-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355851, "uuid": "8825ee39-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/parm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355852, "uuid": "88ff8f00-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355852, "uuid": "88ff9023-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/parm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355909, "uuid": "aadc86af-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ab3602de-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ab3dd126-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ab41edf7-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/parm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ab41f4ab-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/parm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ab41fc2e-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355910, "uuid": "ab4448cc-3096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/private/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356781, "uuid": "b2b37224-3098-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.162.63.145:52380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356821, "uuid": "cabd215c-3098-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.1.82:59561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358251, "uuid": "1ea4c60a-309c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.203:60208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358498, "uuid": "b24e0155-309c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.23.75.94:47816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358739, "uuid": "41906dae-309d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.22:43467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775359153, "uuid": "38b9eb36-309e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.206.240:53385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775359927, "uuid": "059d3e1f-30a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.254.10.213:52129/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360005, "uuid": "344ad3cf-30a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.203:60208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360063, "uuid": "57196489-30a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.149.21:40984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360185, "uuid": "9fb72aa5-30a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.23.75.94:47816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360227, "uuid": "b876f678-30a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.110.208.148:56280/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360545, "uuid": "7660b1e9-30a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.7.86:49191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360842, "uuid": "2762690b-30a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.165:45280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361076, "uuid": "b2933bb5-30a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.178.132:34151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361203, "uuid": "fe8e681c-30a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/parm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361625, "uuid": "f9b6e98b-30a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.254.62:59739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361731, "uuid": "39402bcd-30a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.114.65:55751/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362276, "uuid": "7d9811c0-30a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/per", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362325, "uuid": "9b34868f-30a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/per.go", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "Go", "colour": "#7e78ab", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362345, "uuid": "a6bff3bf-30a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.128.184.185:51413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362524, "uuid": "11bf7ca5-30a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.165:45280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362940, "uuid": "09b2c112-30a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.178.132:34151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363528, "uuid": "681ded93-30a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.114.65:55751/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364211, "uuid": "fef6116b-30a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.128.184.185:51413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364256, "uuid": "1a1b1261-30aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.126.149:42257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364262, "uuid": "1da44683-30aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.74.77:58121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364977, "uuid": "c79a1c63-30ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.254.62:59739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365869, "uuid": "db6687dc-30ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.126.149:42257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366226, "uuid": "b080f7a8-30ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:38807/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366227, "uuid": "b0aa6909-30ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.145:43651/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366232, "uuid": "b3fdd77d-30ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.198.18:58637/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366527, "uuid": "637cf7ec-30af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.198.18:58637/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775367378, "uuid": "5ea764de-30b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:40891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775367727, "uuid": "2ed0defe-30b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.145:43651/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775368221, "uuid": "55361579-30b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.110.208.148:56280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775368509, "uuid": "00c99f2e-30b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.225.54:36949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775368686, "uuid": "6aa98110-30b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snack-api.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775368866, "uuid": "d5f75a61-30b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-belyash.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775369061, "uuid": "49dcc08c-30b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:40891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775369117, "uuid": "6b95aebc-30b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.222.167:59680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775369119, "uuid": "6cec9f48-30b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.50:35375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775369409, "uuid": "196f58d6-30b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drink-sync.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775369658, "uuid": "ae0feb4a-30b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.77.105:42770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775369898, "uuid": "3cd74ad6-30b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:48815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370189, "uuid": "ea789b91-30b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://berry-mix.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370310, "uuid": "32433ac8-30b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.83:47437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370378, "uuid": "5ad82b32-30b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.228.227:33208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370427, "uuid": "785f98ca-30b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.80.198.171:58842/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370558, "uuid": "c6107876-30b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.225.54:36949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370627, "uuid": "efb8fd16-30b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.173.170:51714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370850, "uuid": "741e69b3-30b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-node.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371448, "uuid": "d8caa1dc-30ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.83:47437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371513, "uuid": "ffd4c7f3-30ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-svc.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371632, "uuid": "4662e8bc-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.231.238:47812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d5eaa6fb-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d5efadc4-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d5f071ae-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d626cf52-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d626d00d-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371873, "uuid": "d62f1f7c-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371874, "uuid": "d6966f50-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371874, "uuid": "d6a0ee8e-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371874, "uuid": "d6a6e5c1-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371874, "uuid": "d6a79dc5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "da59affe-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371880, "uuid": "da903826-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "daaa8810-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "daaff83c-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "daf1dd2f-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "db126f5a-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "db12c8ea-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "db13db55-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "db14d526-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371881, "uuid": "db21552e-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db3dd08c-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db4daf8f-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db5233d5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db6976a5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db69dcc5-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db6cbfc0-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.150.66.9/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "db78f115-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.3.240/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "dba40426-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371882, "uuid": "dbae6b38-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "dcd55f6d-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "dce8505d-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371884, "uuid": "dced696b-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.211.154.155/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371885, "uuid": "dd0b8682-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.12.216:34093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "fb775046-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "fb78ecc6-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371936, "uuid": "fbabf214-30bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371994, "uuid": "1e3bf564-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371994, "uuid": "1e3bf573-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372053, "uuid": "4160ab2d-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.173.170:51714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372227, "uuid": "a8ea46a1-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wash-logic.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372296, "uuid": "d22cc27d-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.101.23:38148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f481d68a-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/all.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f48460c9-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/o", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f48497b6-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/t", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f48612af-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/ohshit.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372353, "uuid": "f486b198-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372354, "uuid": "f4bccb88-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.98.25/bins/bins.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372354, "uuid": "f4be05bb-30bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/cache", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372409, "uuid": "15a30499-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372411, "uuid": "16cc2dad-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372411, "uuid": "16cc6cac-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372415, "uuid": "19431dd4-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372415, "uuid": "19562a4e-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372415, "uuid": "196389b5-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372415, "uuid": "196389b7-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.97/a-r.m-5.SNOOPY", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372415, "uuid": "197f1d7a-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "1999765d-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_i468", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "199fc46f-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "199fc7a2-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "199feaba-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a0c08c-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a0d192-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a0d2a0-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a0db1c-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a10493-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a12df6-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a2c43f-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a39dc8-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a3c27a-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19a57bd0-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19e1ba01-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19e256f6-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372416, "uuid": "19e687c6-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1ba7fb22-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/all.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1ba82ad9-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/o.xml", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bad91b3-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/s", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bb082cc-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.222.167:59680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bbc8089-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.97/SnOoPy.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bbe5dcc-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bbeb4c9-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bbed2aa-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bc75bff-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bca9b12-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bd6a0e4-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bdb01a1-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372419, "uuid": "1bdd925c-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372427, "uuid": "209d0efd-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372427, "uuid": "209d1052-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.38.236.50/z0l1mxjm4mdl4jjfjf7sb2vdmv/MMaaRRiiOisecTanee.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372533, "uuid": "5f87e5ab-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372533, "uuid": "5f8b2941-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.118/mips.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372718, "uuid": "cde1da9f-30bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.101.240:37749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372951, "uuid": "58668792-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky.okiselwhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373128, "uuid": "c20f51ae-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373128, "uuid": "c2168d6d-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373130, "uuid": "c37f23c1-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373130, "uuid": "c387b557-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373134, "uuid": "c5c558d2-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "c82c53f8-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "c82c9352-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "c834f42c-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "c8350765-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373138, "uuid": "c83517f0-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373141, "uuid": "ca11f70a-30be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.xenema.vip/hiddenbin/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373974, "uuid": "ba2b53cd-30c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.12.216:34093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775374281, "uuid": "71abc0e6-30c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.125.50:44896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775374392, "uuid": "b3ac0ed9-30c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.101.240:37749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775374639, "uuid": "46f35486-30c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.242.3.55:36800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775374641, "uuid": "47bbb594-30c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.242.3.55:36800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375182, "uuid": "8a94f8c5-30c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.19.49.134:44646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375296, "uuid": "ce520e4b-30c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.101.23:38148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375478, "uuid": "3aa5dd37-30c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.11.194:52321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375654, "uuid": "a3fc1734-30c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.125.50:44896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "2e419708-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.x86_32", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "2e454c21-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375886, "uuid": "2e45522a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "305484ef-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "3059df8b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "3059ec33-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "3059ed0c-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.x86_32", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "3059f718-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "3059f82a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.ppc440", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "3059f9e1-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "305a04b5-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "305e7918-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375890, "uuid": "305ed0fb-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375894, "uuid": "32dd176b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375895, "uuid": "33279cd4-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375895, "uuid": "33af5d3b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "33d95311-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "33dedd07-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "33e96e7f-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "33edcd85-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "33eff0a1-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "34105c60-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "3412b1c4-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375896, "uuid": "3425cf41-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35c388c3-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35c7011b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35d99e10-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35e4748e-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35e8d76a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35f5d81e-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35f7a56f-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "35fe16dd-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "360024a9-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "3600485f-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "36033c76-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "3603452a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375899, "uuid": "360a6c9b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375901, "uuid": "36fd7a0a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375901, "uuid": "37044757-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "38637c0e-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "38638312-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "3867b359-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "386801ce-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "386cdf20-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "38751c11-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.mipsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375903, "uuid": "38752aa4-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "3897f22a-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "3899a5f0-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375904, "uuid": "389ba6a9-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375905, "uuid": "3928352e-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375905, "uuid": "39616081-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375905, "uuid": "3966cf3b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375905, "uuid": "39766509-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375907, "uuid": "3acc1e47-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375909, "uuid": "3bc65ba3-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "3cc753b8-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.mipsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "3cc85c2e-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/huhu/titanjr.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "3cde0210-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "3cde02e5-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "3d017b48-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375911, "uuid": "3d2abf5d-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.134.67/huhu/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "3e1dd216-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "3e32d3b2-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "3e47186b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "3e4b9031-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375913, "uuid": "3e609db2-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.119.155.130/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375916, "uuid": "3ff11824-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/titanjr.ppc440", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375918, "uuid": "412544c1-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/main_spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375948, "uuid": "53005c4e-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/u", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375948, "uuid": "5314a04b-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/giga.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375952, "uuid": "552fd0b2-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/all.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375962, "uuid": "5b95c709-30c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kual11.duckdns.org/o.xml", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376727, "uuid": "237efee3-30c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.240.58:45756/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376845, "uuid": "6987ff6a-30c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8301037712/JSmJXqG.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775377453, "uuid": "d3fdd3bc-30c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.11.194:52321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775377663, "uuid": "510e3b39-30c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.96.184:39644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775377938, "uuid": "f55e7349-30c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.115:45753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775378169, "uuid": "7f265f41-30ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.48.14:56706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775378226, "uuid": "a1170ca1-30ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.240.58:45756/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775378419, "uuid": "14293b5f-30cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.183.184.74:56089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775378663, "uuid": "a56b174e-30cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.193.241:55890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775378827, "uuid": "072cfca5-30cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.251.149:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775379076, "uuid": "9b60ce48-30cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.187.63:46533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775379198, "uuid": "e458fdf6-30cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.80.104:60301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775379309, "uuid": "26689d32-30cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.96.184:39644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775379379, "uuid": "501ba126-30cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.115:45753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775379428, "uuid": "6d4581f1-30cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.204.216:54088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775380165, "uuid": "24a73125-30cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.33.61:42919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775380219, "uuid": "44eda6b1-30cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.184.19.72:35528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775380282, "uuid": "6a2e811a-30cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.187.63:46533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775380339, "uuid": "8c1af207-30cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.193.241:55890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775380748, "uuid": "7fe88d60-30d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://051516xx.vectorprospera.digital/?=check&&actmn=qYXcbmMVbzghCbqV", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775380938, "uuid": "f178fc2d-30d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.204.216:54088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775381722, "uuid": "c4b49798-30d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.184.19.72:35528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775381840, "uuid": "0b1708ad-30d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.33.61:42919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775383639, "uuid": "3b0ed924-30d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.208.112:45672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775383883, "uuid": "ccb1c724-30d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.176.236:39468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775383888, "uuid": "cfb695fb-30d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.71.127:46152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384310, "uuid": "caf773a7-30d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.109.61:48558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384540, "uuid": "54321eb4-30d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.7.86:49191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384963, "uuid": "508a1917-30da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.92.201:54137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385127, "uuid": "b211c41b-30da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.62:50466/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385323, "uuid": "26f7334f-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.208.112:45672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385323, "uuid": "270ccf99-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.176.236:39468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385323, "uuid": "2717d038-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.71.127:46152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385438, "uuid": "6b59ffa9-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.93.70:55118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385445, "uuid": "6f91343d-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.77.120:45032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385502, "uuid": "91b77988-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.160:38148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385673, "uuid": "f78a5c73-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.180.158.120:2111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775385680, "uuid": "fbded75b-30db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.180.158.120:2111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386042, "uuid": "d3540fff-30dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.93.70:55118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386328, "uuid": "7de894ec-30dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.72.116:57923/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386822, "uuid": "a4664c5d-30de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.77.120:45032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386822, "uuid": "a46654d5-30de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.160:38148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387227, "uuid": "95d43640-30df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.79.204:54149/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387365, "uuid": "e861ed09-30df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.89.121.42:61335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387720, "uuid": "bba42554-30e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.116.102:46020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387958, "uuid": "49855c91-30e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.33.161:39490/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388856, "uuid": "60dc2c3a-30e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.219.238:52577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388970, "uuid": "a4862eb7-30e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.33.161:39490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389148, "uuid": "0ef74dae-30e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.127:53103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389150, "uuid": "0fcacb66-30e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.250.160:57977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389713, "uuid": "5f7f7cf2-30e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.114.57:37837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390179, "uuid": "756cd6a3-30e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:52560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390715, "uuid": "b4ab73cc-30e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.127:53103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390773, "uuid": "d781d26e-30e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.219.238:52577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390955, "uuid": "43c3db53-30e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.250.160:57977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391558, "uuid": "ab95e56e-30e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.114.57:37837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391743, "uuid": "19ae7560-30ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:52560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391744, "uuid": "1a1a9a17-30ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.7:34979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775392337, "uuid": "7b8a6ba5-30eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.108.122:45751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775392820, "uuid": "9b3ede30-30ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.114:39695/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393301, "uuid": "ba3faaa9-30ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.7:34979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393357, "uuid": "dbceb412-30ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.158.186:57890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393659, "uuid": "8fe00748-30ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.108.122:45751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393769, "uuid": "d161130c-30ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.71.141:56631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393913, "uuid": "2733fefa-30ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.156.226:44295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775394377, "uuid": "3bdd1850-30f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.244.180.22:60885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775394973, "uuid": "9eb9c75d-30f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.158.186:57890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395042, "uuid": "c7d54e43-30f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.71.141:56631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395327, "uuid": "71ccc186-30f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.248.234:33035/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395568, "uuid": "018842ac-30f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:49966/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396180, "uuid": "6e6b8a47-30f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.164.88:46771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396657, "uuid": "8a63fe35-30f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:39775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396961, "uuid": "3fa9c7c4-30f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.86:49018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396961, "uuid": "3fc96c31-30f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:39775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775397068, "uuid": "7fb29745-30f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.199.122:59871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775397249, "uuid": "eb525452-30f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.8.232:37380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775397381, "uuid": "39eae025-30f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:37136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775397732, "uuid": "0b92559f-30f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.164.88:46771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398270, "uuid": "4bb65e47-30f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.86:49018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398400, "uuid": "994fb00d-30f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.191.97:49822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398518, "uuid": "dfb191c8-30f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.8.232:37380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398699, "uuid": "4b7a0ab5-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.71.103:55329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70a90c44-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.199.122:59871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70e5860c-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70e8f2ca-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70e8f8e8-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70e8fb66-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70ed089c-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70eda18e-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398761, "uuid": "70eda967-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "70f4e4c9-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "70f4ebce-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "70f899ed-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "70f9c2f4-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "70fbf396-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "71092ed8-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398762, "uuid": "710b9b16-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398769, "uuid": "755d3a09-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398769, "uuid": "758efda0-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/harm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398770, "uuid": "75bb4e54-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398770, "uuid": "75df1c0e-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398770, "uuid": "75faa623-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/harm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398770, "uuid": "760a02fb-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398771, "uuid": "769f6ee2-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/hmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398771, "uuid": "76c9bea6-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398772, "uuid": "77181e29-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/harm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398772, "uuid": "772a110d-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.132/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398809, "uuid": "8d3f039f-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398877, "uuid": "b5828b61-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.253/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398927, "uuid": "d372e393-30fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.83.3:52343/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399059, "uuid": "226cbbca-30fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:37136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399179, "uuid": "6a144ed8-30fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.125:35619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399773, "uuid": "cbc40e33-30fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:42270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399958, "uuid": "3a32ebbe-30fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.191.97:49822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400429, "uuid": "52f05c98-30fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.71.103:55329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400500, "uuid": "7cee1900-30fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.50.70:53049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400557, "uuid": "9f35a5e1-30fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.6:52717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400680, "uuid": "e8970e30-30fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.156:60560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401102, "uuid": "e4020ff9-30ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.238.50:55819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401522, "uuid": "de32d781-3100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:42270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401522, "uuid": "de41131a-3100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.252:38726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401576, "uuid": "fe932fd6-3100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.146:40445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401629, "uuid": "1e60ae9b-3101-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.146:40445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402000, "uuid": "fb1e1a6e-3101-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.51:49191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402242, "uuid": "8bbd1330-3102-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.50.70:53049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402839, "uuid": "ef6b4721-3103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.238.50:55819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403139, "uuid": "a22d8c7d-3104-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.51:49191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403262, "uuid": "eb94c5d4-3104-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.227.213:48976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403334, "uuid": "162576d5-3105-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.252:38726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403679, "uuid": "e40b7979-3105-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.64.135.181:34555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404153, "uuid": "fecbabd6-3106-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.36:57641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404407, "uuid": "95d15adc-3107-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.156.90.30:53370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404604, "uuid": "0b400b6f-3108-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.229:41182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405294, "uuid": "a67606c7-3109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.36:57641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405604, "uuid": "5f2106ee-310a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.64.135.181:34555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405769, "uuid": "c1fedd69-310a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1781548144/KVJUXwl.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405904, "uuid": "126c8bcf-310b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.146.69:35466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775406140, "uuid": "9f1f43ef-310b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.229:41182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775406322, "uuid": "0b8bd264-310c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.53:58122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775406688, "uuid": "e53a9d51-310c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:47183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407102, "uuid": "dc532642-310d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.156.226:44295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408481, "uuid": "127176f6-3111-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.53:58122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408665, "uuid": "7fd8d9e9-3111-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.155.246:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408723, "uuid": "a27e6133-3111-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.169:38572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408901, "uuid": "0c4473e6-3112-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.229.54:60779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409502, "uuid": "72af6e09-3113-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.159:49082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410155, "uuid": "f832e7d7-3114-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.39/move", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410638, "uuid": "17ba2d8f-3116-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.133.180:58265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411060, "uuid": "13512ba4-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.169:38572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79e8d8a0-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79e8daf7-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79e8f2bc-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79ea27f4-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79ebbf9b-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79f49461-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79f6d204-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79f8a423-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "79feb370-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "7a065887-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "7a0cf82a-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "7a123cd0-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411232, "uuid": "7a146646-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411290, "uuid": "9cc3a8c1-3117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/release/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411829, "uuid": "ddfdbadc-3118-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.232.64.184:54840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775412326, "uuid": "062a1e4f-311a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.31.137:33359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775412438, "uuid": "4905ec05-311a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.57:36912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775412737, "uuid": "fb06d54f-311a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.121:40370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413339, "uuid": "61b1bd2b-311c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.121:40370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775414051, "uuid": "0a7c9ebb-311e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.31.137:33359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415619, "uuid": "b08706c1-3121-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.86.103:36861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415726, "uuid": "f0da2835-3121-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:36165/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415727, "uuid": "f0f145a2-3121-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.80.104:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416098, "uuid": "ce47478c-3122-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.140.201.235:53179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416337, "uuid": "5cfe875d-3123-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418426, "uuid": "39f54b57-3128-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:49721/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418491, "uuid": "609d422d-3128-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.251.50:39891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418726, "uuid": "ecbec753-3128-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:49721/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419161, "uuid": "f0150b67-3129-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.45.95.254:46502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419211, "uuid": "0d822e98-312a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.227.213:48976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419279, "uuid": "363abd35-312a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.45.95.254:46502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419344, "uuid": "5d0bdff9-312a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:49198/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419576, "uuid": "e70e0b34-312a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/fak.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419876, "uuid": "9a2a23dd-312b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/tony.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420529, "uuid": "1f23f1cc-312d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.77.227:51985/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421127, "uuid": "83bddba3-312e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.37.209:42280/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421726, "uuid": "e9190c07-312f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.114:39695/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421738, "uuid": "f045f07e-312f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.98.24:59071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421746, "uuid": "f4f9041d-312f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:49198/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421967, "uuid": "78bbd23d-3130-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://art-studio.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422027, "uuid": "9c73e965-3130-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.58:49795/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422329, "uuid": "503115c5-3131-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://paint-job.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422567, "uuid": "ddf6797f-3131-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brush-api.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422627, "uuid": "019d86c3-3132-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.37.209:42280/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422868, "uuid": "9153b177-3132-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.85:38955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775423229, "uuid": "68db04e2-3133-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sister-hub.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775423240, "uuid": "6f3c1e05-3133-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.76:43816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775423409, "uuid": "d3cee89b-3133-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://color-set.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775423590, "uuid": "3fb2e9ca-3134-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://draw-sync.gouachesoror.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775423950, "uuid": "16864fc8-3135-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://truth-verify.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424309, "uuid": "ec868cd7-3135-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-audit.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424318, "uuid": "f1cd2f6b-3135-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.85:38955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424327, "uuid": "f743b34f-3135-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:43436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424386, "uuid": "1a56372c-3136-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.116.102:46020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424427, "uuid": "32a2b3f8-3136-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.233.212:48954/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424667, "uuid": "c201b77e-3136-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proof-engine.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424973, "uuid": "781a2477-3137-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-theory.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424984, "uuid": "7ee58fe9-3137-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.181:56330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425272, "uuid": "2a58a3af-3138-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-vault.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425633, "uuid": "018ad72c-3139-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://study-sync.epistemicforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425810, "uuid": "6b4df07f-3139-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://entity-map.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425824, "uuid": "73342b37-3139-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:43436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426120, "uuid": "2418d266-313a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.255.154:51368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426477, "uuid": "f8c98267-313a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.91.101:55325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426535, "uuid": "1b77d960-313b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.25.170:37028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426833, "uuid": "cce3b0a2-313b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-object.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426902, "uuid": "f5ccd4e7-313b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.255.154:51368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427081, "uuid": "60980789-313c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.25.170:37028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427979, "uuid": "77e56f34-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427985, "uuid": "7b3a0a1d-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427985, "uuid": "7b3d4ba3-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427985, "uuid": "7b4510e1-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427985, "uuid": "7b4a87b1-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427985, "uuid": "7b4df54a-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428038, "uuid": "9b2a150d-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428043, "uuid": "9dde51f5-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428044, "uuid": "9eb0a77d-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428044, "uuid": "9eb4ef9d-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428099, "uuid": "bf4848aa-313e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.63/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429063, "uuid": "fe405315-3140-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.91.10:41173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429063, "uuid": "fe493ab5-3140-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.91.10:41173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429601, "uuid": "3e91f787-3142-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:33361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430126, "uuid": "77d1e0c6-3143-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.133.180:58265/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430281, "uuid": "d3d81060-3143-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.1.67:49969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775431102, "uuid": "bda0f57b-3145-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:33361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775433127, "uuid": "747368ac-314a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.134.103:41848/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775380746, "uuid": "7ed5e585-30d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "051516xx.vectorprospera.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358484, "uuid": "a9b5ca1e-309c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.23.75.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775351824, "uuid": "283aca12-308d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.130.214.71", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375165, "uuid": "804ea0c5-30c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.19.49.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372344, "uuid": "ef11ad36-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.38.236.50", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361607, "uuid": "ef2f7148-30a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.254.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361065, "uuid": "abd26080-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.178.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360224, "uuid": "b7112042-30a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.110.208.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389684, "uuid": "4e847f3c-30e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.59.114.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422865, "uuid": "8fc27be9-3132-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.20.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396944, "uuid": "35a969c3-30f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.26.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775393885, "uuid": "16887388-30ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.156.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775377625, "uuid": "3a8a8f9a-30c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.96.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430245, "uuid": "be66931d-3143-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.1.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404565, "uuid": "f41e2ac4-3107-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.112.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408645, "uuid": "7423da94-3111-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.155.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355184, "uuid": "faf2d73a-3094-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.223.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398684, "uuid": "430a0afb-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.71.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424965, "uuid": "73346f91-3137-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.31.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775397065, "uuid": "7da68462-30f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.239.199.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352425, "uuid": "8e7be0df-308e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.170.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355006, "uuid": "909dc30f-3094-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371865, "uuid": "d18d2158-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.12.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376725, "uuid": "223a46f9-30c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.240.58", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775348165, "uuid": "a31008a9-3084-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.48.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775421724, "uuid": "e7bf2fc3-312f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.98.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360045, "uuid": "4c2744c3-30a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.149.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387944, "uuid": "415e5f1a-30e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.33.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775374264, "uuid": "674dc541-30c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.125.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370606, "uuid": "e2f1aefa-30b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.173.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358244, "uuid": "1acd3dbf-309c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.50.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426525, "uuid": "150c5ebf-313b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.167.25.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389145, "uuid": "0d11bed7-30e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.178.250.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426105, "uuid": "1aede0b3-313a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.99.255.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775429045, "uuid": "f34b23c7-3140-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.91.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362325, "uuid": "9b1ab91b-30a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.128.184.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775393346, "uuid": "d4eb95bf-30ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.158.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387345, "uuid": "dbf398f7-30df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.89.121.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349425, "uuid": "92298b5c-3087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.160.191.203", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355123, "uuid": "d668b861-3094-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.162.63.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422025, "uuid": "9ac8f178-3130-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.168.58", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385485, "uuid": "878cafb7-30db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.24.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383625, "uuid": "32da2e11-30d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.208.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775374624, "uuid": "3e125427-30c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.242.3.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387704, "uuid": "b21d2bdf-30e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.116.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355305, "uuid": "43199a93-3095-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.1.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361725, "uuid": "35a290f0-30a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.114.65", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396165, "uuid": "6567625b-30f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.164.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349545, "uuid": "d9a06a70-3087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.251.64.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427965, "uuid": "6f495335-313e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.150.63", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360525, "uuid": "6a4b4974-30a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.7.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349485, "uuid": "b5a18674-3087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.41.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366224, "uuid": "af345741-30ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.198.18", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385425, "uuid": "63d40288-30db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.93.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775392326, "uuid": "750b8cfc-30eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.108.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775397244, "uuid": "e8aa7f9b-30f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.8.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404145, "uuid": "f9ed5390-3106-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.128.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398745, "uuid": "66ff0bd1-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.208.159.132", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349545, "uuid": "d9a05f3f-3087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.9.46.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372344, "uuid": "ef11d33a-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.189.98.25", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775377925, "uuid": "ed35975d-30c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.211.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775391727, "uuid": "0ffb1a39-30ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.5.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775379424, "uuid": "6b0e81a9-30cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.204.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353625, "uuid": "595af032-3091-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.208.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354944, "uuid": "6bc7b8b6-3094-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.219.79.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775412306, "uuid": "fa0dc31d-3119-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.189.31.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349245, "uuid": "27096793-3087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.231.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403244, "uuid": "e08d7ea4-3104-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.227.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424424, "uuid": "30f0030c-3136-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.210.233.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775412424, "uuid": "407eebce-311a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.120.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360825, "uuid": "1cfe1588-30a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.48.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775378645, "uuid": "9a6dd9c0-30cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.193.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404385, "uuid": "8901737a-3107-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.156.90.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398745, "uuid": "66fee987-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.60.216.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398925, "uuid": "d267c03e-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.83.3", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370425, "uuid": "770691fe-30b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.80.198.171", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366224, "uuid": "af347f00-30ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.144.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370307, "uuid": "30bb2394-30b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.148.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775406306, "uuid": "02187474-310c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.151.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775369106, "uuid": "64b0170f-30b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.222.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775433125, "uuid": "730546b3-314a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.134.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398384, "uuid": "9033f7bb-30f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.191.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372286, "uuid": "cc3a1526-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.101.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383866, "uuid": "c29121ae-30d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.176.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372705, "uuid": "c6355d3c-30bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.101.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400485, "uuid": "7421b5ec-30fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.50.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384285, "uuid": "bc2d5f79-30d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.109.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368506, "uuid": "ff275b2b-30b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.225.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401564, "uuid": "f763328a-3100-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.255.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370366, "uuid": "53ab153b-30b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.228.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775379184, "uuid": "dc0c1a04-30cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.80.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371865, "uuid": "d18ce4ac-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.150.66.9", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398745, "uuid": "66fe602c-30fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.253", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775380206, "uuid": "3cf94956-30cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.184.19.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410145, "uuid": "f2053785-3114-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.194.92.39", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385666, "uuid": "f32e4605-30db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.180.158.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371865, "uuid": "d18bbeed-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.181.3.240", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364245, "uuid": "139dd127-30aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.35.126.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775383866, "uuid": "c2910e86-30d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.71.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388845, "uuid": "5a3e8b7d-30e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.219.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399165, "uuid": "617d229f-30fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.236.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775385425, "uuid": "63d4319a-30db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.77.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775423224, "uuid": "65e4a58c-3133-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.91.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401085, "uuid": "d9a85e09-30ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.238.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355665, "uuid": "193fc96f-3096-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.253.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371865, "uuid": "d1929af8-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.48.134.67", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371865, "uuid": "d19474cc-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "75.119.155.130", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371865, "uuid": "d18b6930-30bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.211.154.155", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416084, "uuid": "c6008b65-3122-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.140.201.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775421965, "uuid": "774a5bc3-3130-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "art-studio.gouachesoror.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424970, "uuid": "7677a073-3137-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-theory.epistemicforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370186, "uuid": "e880f977-30b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "berry-mix.okiselwhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370847, "uuid": "72a8a7fb-30b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-node.okiselwhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422564, "uuid": "dc591010-3131-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brush-api.gouachesoror.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371508, "uuid": "fcc66c67-30ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-svc.okiselwhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372946, "uuid": "558b7315-30be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky.okiselwhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373124, "uuid": "bff0b150-30be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cnc.xenema.vip" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775423405, "uuid": "d1d113b9-3133-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "color-set.gouachesoror.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775423588, "uuid": "3e6767f7-3134-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "draw-sync.gouachesoror.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775369406, "uuid": "179b83d1-30b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drink-sync.okiselwhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425806, "uuid": "68f0cf63-3139-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "entity-map.ontologicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426831, "uuid": "cba9f31e-313b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-object.ontologicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368864, "uuid": "d46e6709-30b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-belyash.balkarbelyashi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375885, "uuid": "2d674a78-30c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kual11.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424307, "uuid": "eafeb656-3135-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-audit.epistemicforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425270, "uuid": "2921a356-3138-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-vault.epistemicforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422326, "uuid": "4e9a0702-3131-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "paint-job.gouachesoror.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424665, "uuid": "c0853590-3136-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proof-engine.epistemicforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775423226, "uuid": "6732a91c-3133-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sister-hub.gouachesoror.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775368685, "uuid": "69a9a734-30b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snack-api.balkarbelyashi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425630, "uuid": "ffeafaa5-3138-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "study-sync.epistemicforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775423947, "uuid": "14aa2e10-3135-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "truth-verify.epistemicforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372225, "uuid": "a7ec6078-30bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wash-logic.okiselwhiten.in.net" } ] } }